The vulnerability identified as CVE-2024-52378 affects labs64 DigiPass versions up to 0.3.0. It is an improper limitation of a pathname to a restricted directory, commonly known as an absolute path traversal vulnerability. This allows an attacker to specify arbitrary file paths outside the intended directory, potentially accessing sensitive files. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) indicates the vulnerability is remotely exploitable without privileges or user interaction, impacting confidentiality with high severity but not integrity or availability.

Successful exploitation of this vulnerability could allow an attacker to read sensitive files on the affected system, leading to a high confidentiality impact. There is no indication of impact on integrity or availability. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to DigiPass installations and monitor for unusual file access patterns related to path traversal attempts.