CVE-2024-58404
HIGH
NVD
CVSS Score
7.7
Severity
HIGH
Published
Nov 13, 2026
Vendor
unknown
Description
Zipline versions from 3.4.5 before 3.7.10 contain a path traversal vulnerability in the user data export endpoint via the name query parameter. Authenticated attackers can bypass the user id check and use directory traversal sequences to read arbitrary files on the server host.