Jan path traversal vulnerability - @janhq/core - CVE-2024-36858

Description

An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file. @janhq/core has been deprecated in favor of janhq/jan, this vulnerability has been patched there in v0.5.2.

Recommendation

No fix is available yet. Followings are affected versions:

<= 0.1.11

References

GHSA-qfjh-mvq6-c5p8
CVE-2024-36858
CWE-434
CAPEC-310
OWASP 2021-A4
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for Jan path traversal vulnerability - @janhq/core and gives you actionable findings to investigate.

Start a free scan

Related Issues

Jan path traversal vulnerability - @janhq/core - GHSA-5jqc-qj57-4hrc - CVE-2024-36857
Jan path traversal vulnerability - CVE-2024-37273
mapshaper Path Traversal vulnerability - CVE-2024-1163
Saltcorn Server allows logged-in users to delete arbitrary files because of a path traversal vulnerability - CVE-2024-47818

Apache and Express Path Traversal plus Nginx Restriction Bypass Tests with SmartScanner

Exploiting Server Version Disclosure

CSRF, XXE, and 12 Other Security Acronyms Explained

See something that needs correcting? Let us knowUpdated July 17, 2024