PT-2024-22137 · Nuclei · Nuclei

Gpc1996 · Published 2024-03-15 · Updated 2025-12-05 · CVE-2024-27920

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions Nuclei versions prior to 3.2.0

Description A significant security oversight was identified in Nuclei, involving the execution of unsigned code templates through workflows. This issue specifically affects users utilizing custom workflows, potentially allowing the execution of malicious code on the user's system. The vulnerability stems from an oversight in the workflow execution mechanism, where unsigned code templates could be executed, bypassing the security measures intended to authenticate the integrity and source of the templates.

Recommendations For versions prior to 3.2.0, the primary recommendation is to upgrade to Nuclei v3.2.0, where the vulnerability has been patched. As an interim measure, users should refrain from using custom workflows if unable to upgrade immediately. Only trusted, verified workflows should be executed. Avoid using custom workflows from untrusted sources, including workflows authored by third parties or obtained from unverified repositories. Developers integrating Nuclei into their platforms should ensure they do not permit the execution of custom workflows by end-users from untrusted sources.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-27920

GHSA-W5WX-6G2R-R78Q

GO-2024-2645

Affected Products

Nuclei

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27920.json · Exploit
• https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-w5wx-6g2r-r78q · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w5wx-6g2r-r78q · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27920 · Security Note
• https://osv.dev/vulnerability/GO-2024-2645 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-27920 · Vendor Advisory
• https://github.com/projectdiscovery/nuclei · Note
• https://github.com/projectdiscovery/nuclei/pull/4822 · Note
• https://github.com/projectdiscovery/nuclei/commit/e86f38299765b82ad724fdb701557e0eaff3884d · Note
• https://docs.projectdiscovery.io/templates/protocols/code · Note
• https://twitter.com/CVEnew/status/1768723307929501848 · Twitter Post
• https://t.me/cveNotify/144911 · Telegram Post
• https://docs.projectdiscovery.io/templates/workflows/overview · Note
• https://docs.projectdiscovery.io/templates/reference/template-signing · Note