CVE-2024-40641CWE-78

Unsigned code template execution through workflows in projectdiscovery/nuclei

High · published July 17, 2024

CVSS v3.1
7.4
EPSS
0%
Percentile
22.7
In the wild
Unconfirmed
What it is

Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL. In affected versions it a way to execute code template without -code option and signature has been discovered. Some web applications inherit from Nuclei and allow users to edit and execute workflow files. In this case, users can execute arbitrary commands. (Although, as far as I know, most web applications use -t to execute). This issue has been addressed in version 3.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00311 · 22.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-07-17T17:34Z
EPSS history
Timeline
  • 17 JUL 17:34Z
    Unsigned code template execution through workflows in projectdiscovery/nuclei
    cvelistv5