CVE-2024-27292
HIGH EXPLOITED NUCLEIDocassemble - Local File Inclusion
Title source: nucleiExploitation Summary
CVE-2024-27292 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including th3gokul, NingXin2002. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a Python-based tool for detecting and exploiting CVE-2024-27292, an unauthenticated path traversal vulnerability in Docassemble V1.4.96. The tool sends HTTP requests to the target URL with a path traversal payload to read sensitive files like /etc/passwd.
Description
Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the master branch.
Exploits (2)
This repository contains a Python-based tool for detecting and exploiting CVE-2024-27292, an unauthenticated path traversal vulnerability in Docassemble V1.4.96. The tool sends HTTP requests to the target URL with a path traversal payload to read sensitive files like /etc/passwd.
This PoC exploits CVE-2024-27292, an arbitrary file read vulnerability in Docassemble. It sends a crafted request to read /etc/passwd and checks for the presence of 'root' in the response to confirm vulnerability.
Nuclei Templates (1)
http.title:"docassemble"
icon_hash="-575790689"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N