CVE-2024-30851

MEDIUM

Jasmin Ransomware Web Server Unauthenticated SQL Injection

Title source: metasploit
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2024-30851. PoCs published by chebuya, chebuya, h00die, including Metasploit module auxiliary/gather/jasmin_ransomware_sqli.

AI-analyzed exploit summary This repository contains a functional exploit for CVE-2024-30851, demonstrating a path traversal vulnerability in the Jasmin Ransomware web panel. The exploit leverages an authentication bypass via SQL injection and unsanitized file read operations to dump decryption keys and arbitrary files.

Description

Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the download_file.php component.

Exploits (3)

nomisec WORKING POC 21 stars
by chebuya · poc
https://github.com/chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc

This repository contains a functional exploit for CVE-2024-30851, demonstrating a path traversal vulnerability in the Jasmin Ransomware web panel. The exploit leverages an authentication bypass via SQL injection and unsanitized file read operations to dump decryption keys and arbitrary files.

Classification
Working Poc 95%
Attack Type
Info Leak | Auth Bypass | Sqli
Complexity
Moderate
Reliability
Reliable
Target: Jasmin Ransomware Web Panel v1.1
No auth needed
Prerequisites: Network access to the Jasmin Ransomware web panel · Target server running Jasmin Ransomware Web Panel v1.1
devstral-2 · analyzed Feb 18, 2026 Full analysis →
metasploit WORKING POC
by chebuya, h00die · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/jasmin_ransomware_sqli.rb

This Metasploit module exploits an unauthenticated SQL injection vulnerability in the Jasmin Ransomware web server's login functionality. It uses time-based blind SQLi to dump credentials and victim data from the database.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: Jasmin Ransomware Web Server (all versions, unpatched as of 2024)
No auth needed
Prerequisites: Network access to the Jasmin Ransomware web server
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC
by chebuya, h00die · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/jasmin_ransomware_dir_traversal.rb

This Metasploit module exploits an unauthenticated directory traversal vulnerability in the Jasmin Ransomware web server via the 'download_file.php' endpoint. It allows arbitrary file retrieval by manipulating the 'file' parameter with traversal sequences.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Jasmin Ransomware Web Server (all versions, unpatched as of 2024)
No auth needed
Prerequisites: Network access to the target web server · Knowledge of the target file path
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Scores

CVSS v3 6.5
EPSS 0.0461
EPSS Percentile 90.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-22
Status published
Products (1)
codesiddhant/jasmin-ransomware 1.0.1
Published May 03, 2024
Tracked Since Feb 18, 2026