CVE-2024-22050 is a path traversal vulnerability in Iodine's static file service affecting versions prior to 0.7.33. An unauthenticated remote attacker can exploit this vulnerability by sending specially crafted URLs to access files outside the designated public folder. This improper limitation of pathname access can lead to unauthorized disclosure of sensitive files. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact on confidentiality only.

Successful exploitation allows an unauthenticated attacker to read arbitrary files on the affected system outside the public directory. This can lead to unauthorized disclosure of sensitive information, potentially compromising confidentiality. There is no impact on integrity or availability according to the CVSS vector.

Upgrade Iodine to version 0.7.33 or later, where this path traversal vulnerability has been fixed. Since no patch links are provided in the data, verify the vendor's official advisory or release notes for the fixed version. Until upgraded, restrict access to the static file service or implement web application firewall rules to block malicious URL patterns that attempt path traversal.