CVE-2024-36814

CVSS 4.9 MEDIUMEPSS 0.8%CWE-22

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 4.9EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

08 oct 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Productos afectados

n/a · n/a

Referencias

https://github.com/AdguardTeam/AdGuardHome/https://github.com/AdguardTeam/AdGuardHome/blob/7c002e1a99b9b4e4a40e8c66851eda33e666d52d/internal/filtering/http.go#L23C1-L51C2 https://github.com/itz-d0dgy/https://happy-little-accidents.pages.dev/posts/CVE-2024-36814/