PT-2024-34876 · Unknown+1 · Ruby On Rails+1

David-Yz-Liu + 1 · Published 2024-11-18 · Updated 2025-09-04 · CVE-2024-51743

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MarkUs versions prior to 2.4.8

Description The issue is related to an arbitrary file write vulnerability in the update/upload/create file methods in Controllers, allowing authenticated instructors to write arbitrary files to any location on the web server, depending on the permissions of the underlying filesystem. This can lead to delayed remote code execution if an attacker can write a Ruby file into the config/initializers/ subfolder of the Ruby on Rails application.

Recommendations For MarkUs versions prior to 2.4.8, upgrade to version 2.4.8 to address the issue. As a temporary workaround, consider restricting access to the update/upload/create file methods in Controllers to minimize the risk of exploitation. Avoid using the vulnerable file upload functionality until the issue is resolved.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-51743

GHSA-HWGG-QVJX-572X

Affected Products

Markus

Ruby On Rails

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/51xxx/CVE-2024-51743.json · Exploit
• https://github.com/MarkUsProject/Markus/pull/7026 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-51743 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51743 · Vendor Advisory
• https://github.com/MarkUsProject/Markus/security/advisories/GHSA-hwgg-qvjx-572x · Note
• https://twitter.com/CVEnew/status/1858611259949903984 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1858649875581170058 · Twitter Post
• https://t.me/cveNotify/134281 · Telegram Post
• https://t.me/cvedetector/11377 · Telegram Post
• https://twitter.com/oktsec/status/1858625728171880599 · Twitter Post