CVE-2024-24398 Stimulsoft Dashboard.JS directory traversal vulnerability
Remote attackers can execute arbitrary code via path traversal in the Save function of Stimulsoft Dashboard.JS.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-24398?
CVE-2024-24398 is a critical path traversal vulnerability in n/a, published on 6 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the fileName parameter of the Save function.
Weakness: CWE-22
Which versions are affected by CVE-2024-24398?
2 open source packages ship an affected version, including stimulsoft-dashboards-js. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
stimulsoft-dashboards-js npm | All versions | 2024.1.3 |
stimulsoft-dashboards-js npm | All versions | 2024.1.3 |
Products include Stimulsoft Dashboards.php.
How do I fix CVE-2024-24398?
Upgrade stimulsoft-dashboards-js to 2024.1.3 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2024-24398 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-24398 exists.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-gfqf-9w98-7jmx.