CVE-2024-21534
CRITICALjsonpath-plus < 10.2.0 - Remote Code Execution via Unsafe vm Usage
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2024-21534. PoCs published by verylazytech, pabloopez, BohemianHacks.
AI-analyzed exploit summary The repository contains a functional exploit script for CVE-2024-21534, targeting the jsonpath-plus package's improper input sanitization leading to RCE via Node.js vm module misuse. The script crafts a malicious JSON payload to execute a reverse shell.
Description
All versions of the package jsonpath-plus are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of vm in Node. **Note:** There were several attempts to fix it in versions [10.0.0-10.1.0](https://github.com/JSONPath-Plus/JSONPath/compare/v9.0.0...v10.1.0) but it could still be exploited using [different payloads](https://github.com/JSONPath-Plus/JSONPath/issues/226).
Exploits (3)
The repository contains a functional exploit script for CVE-2024-21534, targeting the jsonpath-plus package's improper input sanitization leading to RCE via Node.js vm module misuse. The script crafts a malicious JSON payload to execute a reverse shell.
This repository contains a functional PoC for CVE-2024-21534, demonstrating RCE in `jsonpath-plus` (<=10.0.7) via unsafe VM module usage in Node.js. The exploit leverages improper input sanitization to execute arbitrary code, with Dockerized setup for reproduction.
This repository contains a functional PoC for CVE-2024-21534, demonstrating RCE in the `jsonpath-plus` package (versions <= 10.0.7) via unsafe evaluation in Node.js's VM module. The exploit includes a vulnerable Express server and a curling app to trigger the vulnerability.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H