[CVE-2024-53982] The Nightmare Before Christmas: An Arbitrary File Download on Zoo-Project

CVE

CVE-2024-53982

Published

2024-12-20 13:00

Collected

2026-07-25 15:51

---
id: 5221
title: "[CVE-2024-53982] The Nightmare Before Christmas: An Arbitrary File Download on Zoo-Project"
cve: CVE-2024-53982
source_domain: xbow.com
source_url: "https://xbow.com/blog/xbow-zoo-project-arb"
published_at: "2024-12-20T13:00:00Z"
tags: ["vulnerability-research", "open-source", "geospatial", "arbitrary-file-download", "zoo-project", "cve-2024-53982"]
phying_url: "https://phying.com/item/5221"
lang: en
---

# [CVE-2024-53982] The Nightmare Before Christmas: An Arbitrary File Download on Zoo-Project

## Summary

A holiday-framed writeup of XBOW's white-box discovery of an arbitrary file download in Zoo-Project's cgi-bin services (CVE-2024-53982), showing the path from source review to a working request.

## Intelligence Metadata

- **Sources:** xbow.com
- **CVE:** CVE-2024-53982
- **Published:** 2024-12-20T13:00:00Z
- **Original:** https://xbow.com/blog/xbow-zoo-project-arb
- **Phying News:** https://phying.com/item/5221