CVE-2024-23822

CVSS V2 None CVSS V3 None

Description

Thruk is a multibackend monitoring webinterface. Prior to 3.12, the Thruk web monitoring application presents a vulnerability in a file upload form that allows a threat actor to arbitrarily upload files to the server to any path they desire and have permissions for. This vulnerability is known as Path Traversal or Directory Traversal. Version 3.12 fixes the issue.

Overview

CVE ID
CVE-2024-23822

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-01-29T15:46:30.188Z

Last Modified Date
2024-01-29T15:46:30.188Z

Weakness Enumerations

CWE	URL
CWE-22	http://cwe.mitre.org/data/definitions/22.html

References

Reference URL	Reference Tags
https://github.com/sni/Thruk/security/advisories/GHSA-4mrh-mx7x-rqjx	x_refsource_CONFIRM
https://github.com/sni/Thruk/commit/1aa9597cdf2722a69651124f68cbb449be12cc39	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-23822
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23822

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 07:04:44				Added to TrackCVE