VDB
CVE-2024-36814
CVE-2024-36814
PUBLISHED
CVSS 6.5 MEDIUM
An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory.
EPSS 0.80% · 53.1th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.80%
53.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a, n/a |
| adguard | adguard_home | 0, 0 |
| github.com | AdguardTeam/AdGuardHome | 0, 0 |
Timeline
- Oct 8, 2024 CVE Published
- Oct 8, 2024 PoC Published
- Oct 9, 2024 EPSS Score
- Oct 10, 2024 PoC Published
- Oct 11, 2024 CVE Updated
- Oct 14, 2024 Coalition ESS Score
- Oct 28, 2024 EPSS Score
- Nov 16, 2024 EPSS Score
- Dec 3, 2024 Coalition ESS Score
- Dec 6, 2024 EPSS Score
- Dec 25, 2024 EPSS Score
- Jan 12, 2025 EPSS Score
References
- https://github.com/AdguardTeam/AdGuardHome/commit/e8fd4b187287a562cbe9018999e5ea576b4c7d68 url
- https://github.com/AdguardTeam/AdGuardHome package
- https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.53 url
- https://happy-little-accidents.pages.dev/posts/CVE-2024-36814 url
- https://pkg.go.dev/vuln/GO-2024-3184 url
- https://github.com/AdguardTeam/AdGuardHome/ technical
- https://github.com/AdguardTeam/AdGuardHome/blob/7c002e1a99b9b4e4a40e8c66851eda33e666d52d/internal/filtering/http.go#L23C1-L51C2 technical
- https://github.com/itz-d0dgy/ technical
- https://github.com/itz-d0dgy url
- https://happy-little-accidents.pages.dev/posts/CVE-2024-36814/ url
- https://nvd.nist.gov/vuln/detail/CVE-2024-36814 advisory