CVE-2024-36858

CRITICALNuclei

Jan path traversal vulnerability

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2024-36858 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Aug 15, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 14, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

jan

Browse homebrew / jan

Default status: unknown

CVE List, VulnCheck0.4.12affected

@janhq/core

Browse npm / @janhq/core
GitHub AdvisoryThrough 0.1.11affected

Nuclei templates

1
ProjectDiscoveryCRITICALJan v0.4.12 - Arbitrary File UploadCVSS 9.8

An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

Impact

Unauthenticated attackers can upload crafted files to execute arbitrary code on the server.

Remediation

Update Jan to a version later than v0.4.12 that patches the arbitrary file upload vulnerability.

WeaknessesCWE-434
Authorspussycat0x
Template tagscvecve2024totolinkunauthintrusivevkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:homebrew:jan:0.4.12:*:*:*:*:*:*:*
FOFA: icon_hash="-165268926"
https://github.com/HackAllSec/CVEs/blob/main/Jan%20AFR%20vulnerability/README.md

Source: ProjectDiscovery

References

4