CVE-2024-45256 Path traversal in n/a
Attackers can overwrite SQLite databases via path traversal in the exfiltration endpoint, bypassing authentication in the BYOB botnet framework.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-45256?
CVE-2024-45256 is a critical path traversal vulnerability in n/a, published on 26 Aug 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in file_add in api/files/routes.py.
Weakness: CWE-22
Which versions are affected by CVE-2024-45256?
How do I fix CVE-2024-45256?
No fix has been published for CVE-2024-45256 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2024-45256 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-45256 exists.
Public exploit code: 1 Metasploit module.
Sources
Also known as GHSA-fw5q-5jr8-g3vh.