PT-2024-28959 · Nuclei · Nuclei

Ovi3 · Published 2024-07-17 · Updated 2024-07-22 · CVE-2024-40641

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions Nuclei versions prior to 3.3.0

Description A way to execute code templates without the -code option and signature has been discovered in Nuclei. This issue affects some web applications that inherit from Nuclei and allow users to edit and execute workflow files, potentially enabling users to execute arbitrary commands. The issue has been addressed in version 3.3.0.

Recommendations For versions prior to 3.3.0, upgrade to version 3.3.0 to resolve the issue. As a temporary workaround, consider restricting access to workflow files and disabling the execution of unsigned code templates until the upgrade is applied. Avoid using the workflows field in YAML files to pretend to be a workflow file, as this can be used to execute arbitrary commands.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-40641

GHSA-C3Q9-C27P-CW9H

GO-2024-2989

Affected Products

Nuclei

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40641.json · Exploit
• https://osv.dev/vulnerability/CVE-2024-40641 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-40641 · Security Note
• https://osv.dev/vulnerability/GHSA-c3q9-c27p-cw9h · Vendor Advisory
• https://osv.dev/vulnerability/GO-2024-2989 · Vendor Advisory
• https://github.com/projectdiscovery/nuclei · Note
• https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-c3q9-c27p-cw9h · Note
• https://t.me/cvenotify/86562 · Telegram Post
• https://t.me/cvedetector/1111 · Telegram Post