Sign in
Deutsch English Español Polski
Medium

changedetection.io Path Traversal

  • Disclosed: 01.11.2024
  • Updated: 11.10.2026 13:19

Summary

When a WebDriver is used to fetch files source:file:///etc/passwd can be used to retrieve local system files, where the more traditional file:///etc/passwd gets blocked

Details

The root cause is the payload source:file:///etc/passwdpasses the regex here and also passes the check here where a traditional file:///etc/passwd would get blocked

PoC

CL-ChangeDetection.io Path Travsersal-311024-181039.pdf

Impact

It depends on where the webdriver is deployed but generally this is a high impact vulnerability

Affected software

Click a technology to see all vulnerabilities affecting it.

PlatformPackageVulnerable versionsFixed in
Python (PyPI) changedetection-io < 0.47.5 0.47.5

References

CVSS score 6.5/10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness (CWE)
CWE-22
Platform
Python (PyPI)
Package
changedetection-io
Disclosed
01.11.2024
Updated
11.10.2026 13:19

Sources and licenses

OSV / GitHub Advisory Database - PYSEC-2026-1240 - PyPA Advisory Database; CC BY 4.0

OSV / GitHub Advisory Database - GHSA-cwgg-57xj-g77r - CC BY 4.0

Vulnerability history: changedetection-io

All published vulnerabilities of this package (Python (PyPI)), newest first. Shows whether this is a one-off slip or a package that needs watching.

All (20) in the archive
Total entries
20
First → latest
02.2023 05.2026
Without a fix
1
Exploited in attacks
0

Severity breakdown

  • Critical 2
  • High 9
  • Medium 6
  • Low 2
  • Unrated 1

Disclosures per year

Severity:
  1. changedetection.io has an Arbitrary Local File Read via a crafted backup restore
    High · 7.5 CVE-2026-43891 < 0.55.1 0.55.1
  2. changedetection.io project has an XXE vulnerability
    High · 7.5 CVE-2026-41895 <= 0.54.9 no fix
  3. changedetection.io Vulnerable to Authentication Bypass via Decorator Ordering
    Critical · 9.8 CVE-2026-35490 < 0.54.8 0.54.8
  4. Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters
    High CVE-2026-33981 < 0.54.7 0.54.7
  5. changedetection.io has Zip Slip vulnerability in the backup restore functionality
    High CVE-2026-29065 < 0.54.4 0.54.4
  6. changedetection.io vulnerable to XPath - Arbitrary File Read via unparsed-text()
    High CVE-2026-29039 < 0.54.4 0.54.4
  7. changedetection.io is Vulnerable to SSRF via Watch URLs
    High · 8.6 CVE-2026-27696 < 0.54.1 0.54.1
  8. ChangeDetection.io XSS in watch overview
    High CVE-2025-52558 < 0.50.4 0.50.4
  9. changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal
    High · 8.6 CVE-2024-56509 < 0.48.05 0.48.05
  10. changedetection.io path traversal using file URI scheme without supplying hostname
    High · 8.6 CVE-2024-51998 < 0.47.6 0.47.6
  11. changedetection.io Path Traversal this entry
    Medium · 6.5 CVE-2024-51483 < 0.47.5 0.47.5
  12. changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution
    Critical · 10.0 CVE-2024-32651 < 0.45.21 0.45.21

Know which vulnerabilities affect your application

With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.

Connect your application
DockRay newsletter

Application security in your inbox

Important vulnerabilities, actionable guidance and practical advice for your applications. Choose your technologies and follow what matters to your project.

  • A daily digest of new vulnerabilities, critical ones included.
  • Notifications about important updates.
  • Practical advice on application security and monitoring.

Leave empty to receive updates for every technology.

Privacy policy

Free to subscribe. Unsubscribe with one click in any email.