CVE-2024-35745 describes a CWE-22 path traversal vulnerability in Strategery Migrations (up to version 1.0) that permits unauthorized file path manipulation. This flaw allows an attacker to bypass directory restrictions and potentially access sensitive files. The CVSS 3.1 base score is 7.5, reflecting high severity due to its network attack vector, low attack complexity, no required privileges or user interaction, and a confidentiality impact. No vendor-provided patch or official remediation level has been published as of the data provided.

An attacker can exploit this vulnerability remotely without authentication or user interaction to read files outside the intended directory scope, potentially exposing sensitive information. The impact is limited to confidentiality compromise; integrity and availability are not affected according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected application, applying compensating controls such as file system permissions, and monitoring for unusual file access patterns related to Strategery Migrations.