CVE-2022-51024 | Kareadita Kavita prior 0.5.4.1 /api/image/cover-upload filename path traversal

October 22, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Kareadita Kavita. The affected element is an unknown function of the file /api/image/cover-upload. Executing a manipulation of the argument filename can lead to path traversal. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is handled as CVE-2022-51024. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More