9.8

CVE-2024-6396

Exploit

Arbitrary File Overwrite and Data Exfiltration in aimhubio/aim

A vulnerability in the `_backup_run` function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any file on the host server and exfiltrate arbitrary data. The vulnerability arises due to improper handling of the `run_hash` and `repo.path` parameters, which can be manipulated to create and write to arbitrary file paths. This can lead to denial of service by overwriting critical system files, loss of private data, and potential remote code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Aimstack ≫ Aim Version3.19.3 SwPlatformpython
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 53.39% 0.989
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security@huntr.dev 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-29 Path Traversal: '\..\filename'

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\..\filename' (leading backslash dot dot) sequences that can resolve to a location that is outside of that directory.

https://huntr.com/bounties/c1b17afd-4656-47bb-8310-686a9e1b04a0
Third Party Advisory
Exploit