← Vulnerability feed

Vulnerability record · CVE-2024-34525 · published 6 May 2024

CVE-2024-34525: Lanol filecodebox vulnerability

LLanol · Filecodebox

FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file.

5.3 CVSS 3.1 Medium EPSS 0.15% · top 96.3% CWE-591 · CWE-591
5.3CVSS 3.1 base score
0.15%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/vastsa/FileCodeBox/issues/133 ExploitIssue Tracking
https://github.com/vastsa/FileCodeBox/issues/133 ExploitIssue Tracking

Track CVE-2024-34525 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2025-51663Lanol filecodebox vulnerabilityA vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and fai…EPSS 0.41%7.5CVE-2025-51661Lanol filecodebox vulnerabilityA path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file writes when application is configured to use local filesys…EPSS 0.53%5.4CVE-2025-51662Lanol filecodebox cross-site scripting vulnerabilityA stored cross-site scripting (XSS) vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input val…EPSS 0.17%7.0CVE-2024-38106Windows Kernel elevation of privilege via race conditionCVE-2024-38106 is a Windows Kernel elevation of privilege vulnerability affecting a broad set of Windows 10, Windows 11 and Windows Server releases. …KEVEPSS 6.3%analysed7.0CVE-2023-28229Windows CNG Key Isolation Service Elevation of PrivilegeThe Windows CNG Key Isolation Service (KeyIso) contains an elevation of privilege flaw. A local attacker with low privileges can exploit it to gain S…KEVEPSS 1.7%analysed

Source: NIST National Vulnerability Database (record CVE-2024-34525), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.