CGA-w7g9-3vp3-5379

Published

Last updated

https://images.chainguard.dev/security/CGA-w7g9-3vp3-5379

Package

nuclei

Latest Update

Fixed

Fixed Version

3.2.8-r2

Aliases

CVE-2024-5262
GHSA-q5mg-pc7r-r8cr

Severity

9.8

Critical

CVSS V3

Summary

Files or Directories Accessible to External Parties in ProjectDiscovery

Description

Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-5262
https://github.com/advisories/GHSA-q5mg-pc7r-r8cr
https://github.com/projectdiscovery/interactsh/pull/874
https://github.com/projectdiscovery/interactsh/commit/6a0cb98b16636a98712729f3d23e34d8bf7260e7
https://github.com/projectdiscovery/interactsh
https://pkg.go.dev/vuln/GO-2024-2907
https://zuso.ai/advisory/za-2024-01

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CGA-w7g9-3vp3-5379

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources