Lucene search

CVE-2024-55602 PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal

🗓️ 10 Dec 2024 16:12:58Reported by GitHub_MType

CVE-2024-55602 PenDoc allows arbitrary file read via path traversal when updating templates.

Reporter	Title	Published	Views	Family All 4
OSV	CVE-2024-55602	10 Dec 202417:15	–	osv
NVD	CVE-2024-55602	10 Dec 202417:15	–	nvd
Cvelist	CVE-2024-55602 PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal	10 Dec 202416:58	–	cvelist
CVE	CVE-2024-55602	10 Dec 202417:15	–	cve

Source	Link
github	www.github.com/pwndoc/pwndoc/blob/2e7f5747d5688b1368e549c786ce7266fe5ab2b5/backend/src/routes/template.js
github	www.github.com/pwndoc/pwndoc/security/advisories/GHSA-2mqc-gg7h-76p6
github	www.github.com/pwndoc/pwndoc/commit/1d4219c596f4f518798492e48386a20c6e9a2fe6
github	www.github.com/pwndoc/pwndoc/blob/2e7f5747d5688b1368e549c786ce7266fe5ab2b5/backend/src/routes/template.js
gist	www.gist.github.com/JorianWoltjer/8a42e25c6dfa7604020d2a226e193407

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Dec 2024 16:58Current

7High risk

Vulners AI Score7

CVSS37.6

EPSS0.0004

SSVC

CWE-22