Back to the CVE list
CVE-2024-41713 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

Vulnerability in N/a

CVSS score

9.1

EPSS probability

%97.2

Risk score

17.7

Published

2 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Mitel MiCollab Authentication Bypass to Arbitrary File Read

Public PoCSource updated: 18.05.2025 08:16:21

A Python script to detect CVE-2024-41713, a directory traversal vulnerability in Apache HTTP Server, enabling unauthorized access to restricted resources. This tool is for educational purposes and authorized testing only. Unauthorized usage is unethical and illegal.

Public PoCSource updated: 11.01.2025 02:46:25

cve-2024-CVE-2024-41713

Public PoCSource updated: 21.12.2024 09:36:20

Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)由于Mitel MiCollab软件的 NuPoint 统一消息 (NPM) 组件中存在身份验证绕过漏洞,并且输入验证不足,未经身份验证的远程攻击者可利用该漏洞执行路径遍历攻击,成功利用可能导致未授权访问、破坏或删除用户的数据和系统配置。影响范围:version < MiCollab 9.8 SP2 (9.8.2.12)

Public PoCSource updated: 21.12.2024 02:28:26

watchtowrlabs/Mitel-MiCollab-Auth-Bypass_CVE-2024-41713

Public PoCSource updated: 25.09.2026 12:04:44

Nuclei: Mitel MiCollab - Authentication Bypass

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-41713"