CVE-2024-21644 Scanner
Detects 'Configuration File Disclosure' vulnerability in pyLoad affects v. .
Used 2.3k times · 4.2k assets checked · url
CVE
CVE-2024-21644
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the `SECRET_KEY` variable. This issue has been patched in version 0.5.0b3.dev77.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
pyload
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: pyload
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →