CVE-2024-37268 is a CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) vulnerability affecting kaptinlin Striking through version 2.3.4. The flaw allows path traversal attacks, enabling an attacker with low privileges and no user interaction to access or manipulate files beyond restricted directories. The CVSS 3.1 base score is 8.5, reflecting network attack vector, high impact on confidentiality, integrity, and availability, and requiring high attack complexity.

Successful exploitation could lead to unauthorized disclosure, modification, or deletion of files outside the intended directory scope, severely impacting system confidentiality, integrity, and availability. The vulnerability requires low privileges but high attack complexity and no user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected application and monitor for suspicious activity related to file access. Avoid exposing the vulnerable service to untrusted networks where possible.