Cyber Resilience

CVE-2024-34470

Hsclabs Mailinspector 5.2.17-3 – 5.2.19

Public PoC
Published
06 May 2024
Modified
17 June 2025
CVSS Score v3.1 8.6
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
EPSS Score 0.067 93th percentile
Risk Priority 88 floored blend · peak EPSS

Summary

CVE-2024-34470 is a high-severity Path Traversal: '\..\filename' (CWE-29) vulnerability in Hsclabs Mailinspector. Its CVSS base score is 8.6 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified map to SI-10 (Information Input Validation) and AC-3 (Access Enforcement) — see the control section below for these in your framework.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2024-34470 is an unauthenticated path traversal vulnerability affecting HSC Mailinspector versions 5.2.17-3 through 5.2.18. It resides in the /public/loader.php endpoint, where the path parameter fails to validate whether requested files or directories reside inside the webroot, allowing arbitrary file reads on the underlying server. The flaw is tracked under CWE-29 and carries a CVSS 3.1 score of 8.6.

An attacker with network access can exploit the issue without credentials or user interaction by supplying crafted path values that traverse outside the intended directory tree. Successful exploitation yields high-impact disclosure of sensitive files on the server, with the vulnerability's changed scope increasing potential reach beyond the vulnerable application.

Public proof-of-concept code demonstrating the traversal has been published on GitHub. The associated EPSS score currently stands at 0.9278 after reaching a peak of 0.9367, reflecting elevated and sustained exploitation interest following disclosure.

EU & UK References

Vulnerability Data

An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An Unauthenticated Path Traversal vulnerability exists in the /public/loader.php file. The path parameter does not properly filter whether the file and directory passed are part of the webroot, allowing an…

more

attacker to read arbitrary files on the server.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise Techniques

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1005 Data from Local System Collection
Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior to Exfiltration.
T1083 File and Directory Discovery Discovery
Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
T1552 Unsecured Credentials Credential Access
Adversaries may search compromised systems to find and obtain insecurely stored credentials.
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2026-29962Same product: Hsclabs Mailinspector
CVE-2024-34471Same product: Hsclabs Mailinspector
CVE-2024-32369Same product: Hsclabs Mailinspector
CVE-2024-34472Same product: Hsclabs Mailinspector
CVE-2026-29963Same product: Hsclabs Mailinspector
CVE-2024-32371Same product: Hsclabs Mailinspector
CVE-2026-29965Same product: Hsclabs Mailinspector
CVE-2026-29964Same product: Hsclabs Mailinspector
CVE-2024-32370Same product: Hsclabs Mailinspector
CVE-2023-6130Shared CWE-29

Affected Assets

hsclabs
mailinspector
5.2.17-3 — 5.2.19

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

Input validation directly neutralizes the '\..\filename' sequence before pathname resolution occurs.

Access enforcement denies requests that resolve outside the intended directory even when the traversal sequence is present.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly require input validation and path sanitization that block this traversal vector.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

finds

Security testing can discover path-traversal flaws but does not itself prevent them in production code.

prevents

Application security requirements can mandate input validation and path canonicalization to block traversal sequences.

prevents

Secure architecture principles include directory sandboxing and safe file-access design that mitigate path traversal.

prevents

Secure coding standards directly require neutralizing path traversal sequences such as '\..\filename'.

References