CVE-2024-42474

Summary

CVE-2024-42474 is a path traversal vulnerability affecting Streamlit, a data-oriented application development framework for Python. This issue, addressed in version 1.37.0 on July 25, 2024, impacts users of hosted Streamlit apps on Windows. When the static file sharing feature is enabled, an attacker could potentially leak the password hash of the Windows user running Streamlit through this vulnerability. This security flaw was specific to Windows systems and has since been patched, mitigating the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.