VDB
CVE-2024-36814
CVE-2024-36814
PUBLISHED
CVSS 6.5 MEDIUM
An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory.
EPSS 0.39% · 60.2th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.39%
60.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a, n/a |
| adguard | adguard_home | 0, 0 |
| github.com | AdguardTeam/AdGuardHome | 0, 0 |
Exploit Intelligence
- CIRCL seen: CVE-2024-36814 (circl-sighting)
- CIRCL published-proof-of-concept: CVE-2024-36814 (circl-sighting)
- https://github.com/itz-d0dgy/ (circl)
- https://github.com/AdguardTeam/AdGuardHome/ (circl)
- https://github.com/AdguardTeam/AdGuardHome/blob/7c002e1a99b9b4e4a40e8c66851eda33e666d52d/internal/filtering/http.go#L23C1-L51C2 (circl)
- https://happy-little-accidents.pages.dev/posts/CVE-2024-36814/ (circl)
Timeline
- Oct 8, 2024 CVE Published
- Oct 8, 2024 PoC Published
- Oct 9, 2024 EPSS Score
- Oct 10, 2024 PoC Published
- Oct 14, 2024 Coalition ESS Score
- Oct 28, 2024 EPSS Score
- Nov 16, 2024 EPSS Score
- Dec 3, 2024 Coalition ESS Score
- Dec 6, 2024 EPSS Score
- Dec 24, 2024 EPSS Score
- Jan 12, 2025 EPSS Score
- Jan 31, 2025 EPSS Score
References
- https://github.com/itz-d0dgy url
- https://github.com/itz-d0dgy/ url
- https://github.com/AdguardTeam/AdGuardHome/ url
- https://github.com/AdguardTeam/AdGuardHome/blob/7c002e1a99b9b4e4a40e8c66851eda33e666d52d/internal/filtering/http.go#L23C1-L51C2 url
- https://happy-little-accidents.pages.dev/posts/CVE-2024-36814/ url
- https://nvd.nist.gov/vuln/detail/CVE-2024-36814 advisory
- https://github.com/AdguardTeam/AdGuardHome/commit/e8fd4b187287a562cbe9018999e5ea576b4c7d68 url
- https://github.com/AdguardTeam/AdGuardHome package
- https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.53 url
- https://happy-little-accidents.pages.dev/posts/CVE-2024-36814 url
- https://pkg.go.dev/vuln/GO-2024-3184 url