Jan path traversal vulnerability

Description

An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 0.1.11

References

• GHSA-878h-rqcq-mv3x
• CVE-2024-37273
• CWE-22
• CWE-434
• CWE-94
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A3
• OWASP 2021-A4
• OWASP 2021-A6

Related Issues

• Jan path traversal vulnerability - @janhq/core - CVE-2024-36858
• Jan path traversal vulnerability - @janhq/core - GHSA-5jqc-qj57-4hrc - CVE-2024-36857
• Langchain Path Traversal vulnerability - CVE-2024-7774
• Saltcorn Server allows logged-in users to delete arbitrary files because of a path traversal vulnerability - CVE-2024-47818

You might also like:

Apache and Express Path Traversal plus Nginx Restriction Bypass Tests with SmartScanner

Exploiting Server Version Disclosure

CSRF, XXE, and 12 Other Security Acronyms Explained

Tags:

npm

@janhq/core