PT-2023-26166 · Nuclei · Nuclei
Keomutchoiboi
·
Publicado
2023-08-04
·
Atualizado
2023-08-23
·
CVE-2023-37896
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Nuclei versions prior to 2.9.9
Description
The issue is related to sanitization problems with payload loading in sandbox mode, affecting users who utilize Nuclei as Go code (SDK) running custom templates. This does not affect CLI users. The problem occurs due to relative paths not being converted to absolute paths before checking the
sandbox flag, allowing arbitrary files to be read on the filesystem in certain cases. The maintainers have enabled sandbox by default for filesystem loading, which can be optionally disabled. The -sandbox option has been deprecated and is now divided into two new options: -lfa (allow local file access) and -lna (restrict local network access).Recommendations
To resolve the issue, upgrade to version 2.9.9, which includes the security fix.
For versions prior to 2.9.9, consider disabling the use of custom templates in Go SDK implementation until the upgrade is applied.
As a temporary workaround, consider disabling the
sandbox mode or restricting local file access to minimize the risk of exploitation.Exploit
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Nuclei