Exploitation Summary
EIP tracks 3 public exploits for CVE-2024-40422. PoCs published by Alperen Ergel, j3r1ch0123, alpernae. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a path traversal vulnerability in Devika v1 via the 'snapshot_path' parameter in the '/api/get-browser-snapshot' endpoint. It allows an attacker to read arbitrary files (e.g., '/etc/passwd') by manipulating the parameter with directory traversal sequences.
Description
The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path traversal attack. An attacker can manipulate the snapshot_path parameter to traverse directories and access sensitive files on the server. This can potentially lead to unauthorized access to critical system files and compromise the confidentiality and integrity of the system.
Exploits (3)
This exploit demonstrates a path traversal vulnerability in Devika v1 via the 'snapshot_path' parameter in the '/api/get-browser-snapshot' endpoint. It allows an attacker to read arbitrary files (e.g., '/etc/passwd') by manipulating the parameter with directory traversal sequences.
This repository contains a functional Python exploit for CVE-2024-40422, a path traversal vulnerability in Devika v1. The exploit sends a crafted request to the '/api/get-browser-snapshot' endpoint to retrieve the contents of '/etc/passwd'.
This PoC exploits a directory traversal vulnerability in Devika v1's `/api/get-browser-snapshot` endpoint via the `snapshot_path` parameter, allowing arbitrary file read on the target system. The exploit sends a crafted HTTP GET request with path traversal sequences to access sensitive files like `/etc/passwd`.
Nuclei Templates (1)
icon_hash="-1429839495"
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N