The vulnerability identified as CVE-2024-49315 affects CodeFlock FREE DOWNLOAD MANAGER (versions up to 1.0.0) and involves improper limitation of a pathname to a restricted directory, commonly known as a path traversal flaw. This allows an attacker to access or influence files outside the intended directory scope. The CVSS score of 8.6 indicates high severity primarily due to the potential impact on availability. There is no evidence of confidentiality or integrity impact. No patch or vendor advisory is currently available, and the product is not a cloud service.

The vulnerability can be exploited remotely without privileges or user interaction, potentially causing denial of service (availability impact). There is no direct impact on confidentiality or integrity according to the CVSS vector. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently available, users should monitor vendor communications for updates. Until a fix is released, consider restricting access to the application and limiting exposure to untrusted networks to reduce risk.