Vulnerabilities > CVE-2023-34096 - Unspecified vulnerability in Thruk

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

thruk

NVD

Published: 2023-06-08

Updated: 2024-11-21

Summary

Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, the file `panorama.pm` is vulnerable to a Path Traversal vulnerability which allows an attacker to upload a file to any folder which has write permissions on the affected system. The parameter location is not filtered, validated or sanitized and it accepts any kind of characters. For a path traversal attack, the only characters required were the dot (`.`) and the slash (`/`). A fix is available in version 3.06.2.

Vulnerable Configurations

Part	Description	Count
Application	Thruk Thruk Thruk 0.01 Thruk Thruk 0.10_1 Thruk Thruk 0.10_2 Thruk Thruk 0.10_3 Thruk Thruk 0.10_4 Thruk Thruk 0.10_5 Thruk Thruk 0.10_6 Thruk Thruk 0.11_0 Thruk Thruk 0.20_0 Thruk Thruk 0.20_1 Thruk Thruk 0.20_3 Thruk Thruk 0.21_1 Thruk Thruk 0.21_2 Thruk Thruk 0.23_2 Thruk Thruk 0.23_3 Thruk Thruk 0.25_1 Thruk Thruk 0.27_1 Thruk Thruk 0.27_2 Thruk Thruk 0.27_3 Thruk Thruk 0.30 Thruk Thruk 0.31 Thruk Thruk 0.32 Thruk Thruk 0.34 Thruk Thruk 0.40 Thruk Thruk 0.42 Thruk Thruk 0.44 Thruk Thruk 0.46 Thruk Thruk 0.48 Thruk Thruk 0.50 Thruk Thruk 0.52 Thruk Thruk 0.54 Thruk Thruk 0.56 Thruk Thruk 0.58 Thruk Thruk 0.60 Thruk Thruk 0.62 Thruk Thruk 0.64 Thruk Thruk 0.66 Thruk Thruk 0.68 Thruk Thruk 0.70 Thruk Thruk 0.70.1 Thruk Thruk 0.72 Thruk Thruk 0.72.1 Thruk Thruk 0.72.2 Thruk Thruk 0.74 Thruk Thruk 0.76 Thruk Thruk 0.76.1 Thruk Thruk 0.78 Thruk Thruk 0.78.1 Thruk Thruk 0.78.2 Thruk Thruk 0.80 Thruk Thruk 0.82 Thruk Thruk 0.82.1 Thruk Thruk 0.84 Thruk Thruk 0.86 Thruk Thruk 0.90 Thruk Thruk 0.92 Thruk Thruk 0.94 Thruk Thruk 0.94.1 Thruk Thruk 0.94.2 Thruk Thruk 0.94.3 Thruk Thruk 0.94.4 Thruk Thruk 1.0.0 Thruk Thruk 1.0.1 Thruk Thruk 1.0.2 Thruk Thruk 1.0.3 Thruk Thruk 1.0.4 Thruk Thruk 1.0.5 Thruk Thruk 1.0.6 Thruk Thruk 1.0.7 Thruk Thruk 1.0.8 Thruk Thruk 1.0.9 Thruk Thruk 1.1.0 Thruk Thruk 1.1.1 Thruk Thruk 1.1.2 Thruk Thruk 1.1.3 Thruk Thruk 1.1.4 Thruk Thruk 1.1.5 Thruk Thruk 1.1.6 Thruk Thruk 1.1.7 Thruk Thruk 1.18 Thruk Thruk 1.20 Thruk Thruk 1.22 Thruk Thruk 1.24 Thruk Thruk 1.26 Thruk Thruk 1.28 Thruk Thruk 1.30 Thruk Thruk 1.32 Thruk Thruk 1.34 Thruk Thruk 1.36 Thruk Thruk 1.38 Thruk Thruk 1.40 Thruk Thruk 1.42 Thruk Thruk 1.44 Thruk Thruk 1.46 Thruk Thruk 1.48 Thruk Thruk 1.50 Thruk Thruk 1.52 Thruk Thruk 1.54 Thruk Thruk 1.56 Thruk Thruk 1.58 Thruk Thruk 1.60 Thruk Thruk 1.60.2 Thruk Thruk 1.62 Thruk Thruk 1.64 Thruk Thruk 1.64-2 Thruk Thruk 1.66 Thruk Thruk 1.66-2 Thruk Thruk 1.68 Thruk Thruk 1.70 Thruk Thruk 1.70-2 Thruk Thruk 1.70-3 Thruk Thruk 1.70-4 Thruk Thruk 1.72 Thruk Thruk 1.72-2 Thruk Thruk 1.74 Thruk Thruk 1.74-2 Thruk Thruk 1.76 Thruk Thruk 1.76-2 Thruk Thruk 1.76-3 Thruk Thruk 1.78 Thruk Thruk 1.78-2 Thruk Thruk 1.78-3 Thruk Thruk 1.80 Thruk Thruk 1.80-2 Thruk Thruk 1.80-3 Thruk Thruk 1.82 Thruk Thruk 1.82-2 Thruk Thruk 1.84 Thruk Thruk 1.84-2 Thruk Thruk 1.84-3 Thruk Thruk 1.84-4 Thruk Thruk 1.84-5 Thruk Thruk 1.84-6 Thruk Thruk 1.86 Thruk Thruk 1.86-2 Thruk Thruk 1.86-3 Thruk Thruk 1.86-4 Thruk Thruk 1.88 Thruk Thruk 1.88-2 Thruk Thruk 1.88-3 Thruk Thruk 1.88-4 Thruk Thruk 2.00 Thruk Thruk 2.00-2 Thruk Thruk 2.02 Thruk Thruk 2.04 Thruk Thruk 2.06 Thruk Thruk 2.08 Thruk Thruk 2.10 Thruk Thruk 2.10-2 Thruk Thruk 2.12 Thruk Thruk 2.12-2 Thruk Thruk 2.12-3 Thruk Thruk 2.14 Thruk Thruk 2.14-2 Thruk Thruk 2.16 Thruk Thruk 2.16-2 Thruk Thruk 2.18 Thruk Thruk 2.20 Thruk Thruk 2.20-2 Thruk Thruk 2.22 Thruk Thruk 2.24 Thruk Thruk 2.24-2 Thruk Thruk 2.26 Thruk Thruk 2.26-2 Thruk Thruk 2.28 Thruk Thruk 2.30 Thruk Thruk 2.30-2 Thruk Thruk 2.30-3 Thruk Thruk 2.32 Thruk Thruk 2.32-2 Thruk Thruk 2.32-3 Thruk Thruk 2.34 Thruk Thruk 2.34-2 Thruk Thruk 2.34-3 Thruk Thruk 2.36 Thruk Thruk 2.38 Thruk Thruk 2.38-2 Thruk Thruk 2.40 Thruk Thruk 2.40-2 Thruk Thruk 2.42 Thruk Thruk 2.42-2 Thruk Thruk 2.44 Thruk Thruk 2.44-2 Thruk Thruk 2.44-3 Thruk Thruk 2.46 Thruk Thruk 2.46-2 Thruk Thruk 2.46.3 Thruk Thruk 2.48 Thruk Thruk 2.48.2 Thruk Thruk 2.48.3 Thruk Thruk 2.50 Thruk Thruk 3.00 Thruk Thruk 3.02 Thruk Thruk 3.04 Thruk Thruk 3.06	196

Summary

Vulnerable Configurations

References