CVE-2024-36814

CVSS 4.9 MEDIUMEPSS 0.8%CWE-22

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 4.9EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

08 out 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Produtos afetados

n/a · n/a

Referências

https://github.com/AdguardTeam/AdGuardHome/https://github.com/AdguardTeam/AdGuardHome/blob/7c002e1a99b9b4e4a40e8c66851eda33e666d52d/internal/filtering/http.go#L23C1-L51C2 https://github.com/itz-d0dgy/https://happy-little-accidents.pages.dev/posts/CVE-2024-36814/