PT-2024-35770 · Jsfinder · Jsfinder

Aprilliar13 · Published 2024-12-05 · Updated 2024-12-11 · CVE-2024-53523

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions JSFinder version d70ab9bc5221e016c08cffaf0d9ac79646c90645

Description The issue concerns a Directory Traversal vulnerability in the find by file function. This allows for potential unauthorized access to files outside the intended directory.

Recommendations For JSFinder version d70ab9bc5221e016c08cffaf0d9ac79646c90645, consider disabling the find by file function until a patch is available to prevent potential exploitation. Restrict access to sensitive files and directories to minimize the risk of unauthorized access.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-53523

Affected Products

Jsfinder

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-53523 · Security Note
• https://github.com/Threezh1/JSFinder/issues/33 · Note
• https://github.com/Threezh1/JSFinder · Note
• https://twitter.com/CVEnew/status/1864774415298498692 · Twitter Post
• https://t.me/cvedetector/12140 · Telegram Post