Vulnerability · Published Oct 8, 2024 · Assigned by mitre
CVE-2024-36814
Medium 4.9
In plain English
A medium-severity path traversal in the github.com/AdguardTeam/AdGuardHome package (Go). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.8%top 43.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/AdguardTeam/AdGuardHome | 0.107.53 | GHSA-9cp9-8gw2-8v7m |
| Go | github.com/AdguardTeam/AdGuardHome | 0.107.53 | GO-2024-3184 |
Affected products (as reported)
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N