Vulnerability · Published Jul 12, 2024 · Assigned by @huntr_ai
CVE-2024-6396Arbitrary File Overwrite and Data Exfiltration in aimhubio/aim
Critical 9.8
In plain English
A critical-severity security flaw in aimhubio/aim from aimhubio. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 53.1% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
A vulnerability in the `_backup_run` function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any file on the host server and exfiltrate arbitrary data. The vulnerability arises due to improper handling of the `run_hash` and `repo.path` parameters, which can be manipulated to create and write to arbitrary file paths. This can lead to denial of service by overwriting critical system files, loss of private data, and potential remote code execution.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| aimhubio | aimhubio/aim | unspecified – through latest |
Weakness: CWE-29 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H