Vulnerabilities > CVE-2024-23822 - Unspecified vulnerability in Thruk

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

thruk

critical

NVD

Published: 2024-01-29

Updated: 2024-11-21

Summary

Thruk is a multibackend monitoring webinterface. Prior to 3.12, the Thruk web monitoring application presents a vulnerability in a file upload form that allows a threat actor to arbitrarily upload files to the server to any path they desire and have permissions for. This vulnerability is known as Path Traversal or Directory Traversal. Version 3.12 fixes the issue.

Vulnerable Configurations

Part	Description	Count
Application	Thruk Thruk Thruk 0.01 Thruk Thruk 0.10_1 Thruk Thruk 0.10_2 Thruk Thruk 0.10_3 Thruk Thruk 0.10_4 Thruk Thruk 0.10_5 Thruk Thruk 0.10_6 Thruk Thruk 0.11_0 Thruk Thruk 0.20_0 Thruk Thruk 0.20_1 Thruk Thruk 0.20_3 Thruk Thruk 0.21_1 Thruk Thruk 0.21_2 Thruk Thruk 0.23_2 Thruk Thruk 0.23_3 Thruk Thruk 0.25_1 Thruk Thruk 0.27_1 Thruk Thruk 0.27_2 Thruk Thruk 0.27_3 Thruk Thruk 0.30 Thruk Thruk 0.31 Thruk Thruk 0.32 Thruk Thruk 0.34 Thruk Thruk 0.40 Thruk Thruk 0.42 Thruk Thruk 0.44 Thruk Thruk 0.46 Thruk Thruk 0.48 Thruk Thruk 0.50 Thruk Thruk 0.52 Thruk Thruk 0.54 Thruk Thruk 0.56 Thruk Thruk 0.58 Thruk Thruk 0.60 Thruk Thruk 0.62 Thruk Thruk 0.64 Thruk Thruk 0.66 Thruk Thruk 0.68 Thruk Thruk 0.70 Thruk Thruk 0.70.1 Thruk Thruk 0.72 Thruk Thruk 0.72.1 Thruk Thruk 0.72.2 Thruk Thruk 0.74 Thruk Thruk 0.76 Thruk Thruk 0.76.1 Thruk Thruk 0.78 Thruk Thruk 0.78.1 Thruk Thruk 0.78.2 Thruk Thruk 0.80 Thruk Thruk 0.82 Thruk Thruk 0.82.1 Thruk Thruk 0.84 Thruk Thruk 0.86 Thruk Thruk 0.90 Thruk Thruk 0.92 Thruk Thruk 0.94 Thruk Thruk 0.94.1 Thruk Thruk 0.94.2 Thruk Thruk 0.94.3 Thruk Thruk 0.94.4 Thruk Thruk 1.0.0 Thruk Thruk 1.0.1 Thruk Thruk 1.0.2 Thruk Thruk 1.0.3 Thruk Thruk 1.0.4 Thruk Thruk 1.0.5 Thruk Thruk 1.0.6 Thruk Thruk 1.0.7 Thruk Thruk 1.0.8 Thruk Thruk 1.0.9 Thruk Thruk 1.1.0 Thruk Thruk 1.1.1 Thruk Thruk 1.1.2 Thruk Thruk 1.1.3 Thruk Thruk 1.1.4 Thruk Thruk 1.1.5 Thruk Thruk 1.1.6 Thruk Thruk 1.1.7 Thruk Thruk 1.18 Thruk Thruk 1.20 Thruk Thruk 1.22 Thruk Thruk 1.24 Thruk Thruk 1.26 Thruk Thruk 1.28 Thruk Thruk 1.30 Thruk Thruk 1.32 Thruk Thruk 1.34 Thruk Thruk 1.36 Thruk Thruk 1.38 Thruk Thruk 1.40 Thruk Thruk 1.42 Thruk Thruk 1.44 Thruk Thruk 1.46 Thruk Thruk 1.48 Thruk Thruk 1.50 Thruk Thruk 1.52 Thruk Thruk 1.54 Thruk Thruk 1.56 Thruk Thruk 1.58 Thruk Thruk 1.60 Thruk Thruk 1.60.2 Thruk Thruk 1.62 Thruk Thruk 1.64 Thruk Thruk 1.64-2 Thruk Thruk 1.66 Thruk Thruk 1.66-2 Thruk Thruk 1.68 Thruk Thruk 1.70 Thruk Thruk 1.70-2 Thruk Thruk 1.70-3 Thruk Thruk 1.70-4 Thruk Thruk 1.72 Thruk Thruk 1.72-2 Thruk Thruk 1.74 Thruk Thruk 1.74-2 Thruk Thruk 1.76 Thruk Thruk 1.76-2 Thruk Thruk 1.76-3 Thruk Thruk 1.78 Thruk Thruk 1.78-2 Thruk Thruk 1.78-3 Thruk Thruk 1.80 Thruk Thruk 1.80-2 Thruk Thruk 1.80-3 Thruk Thruk 1.82 Thruk Thruk 1.82-2 Thruk Thruk 1.84 Thruk Thruk 1.84-2 Thruk Thruk 1.84-3 Thruk Thruk 1.84-4 Thruk Thruk 1.84-5 Thruk Thruk 1.84-6 Thruk Thruk 1.86 Thruk Thruk 1.86-2 Thruk Thruk 1.86-3 Thruk Thruk 1.86-4 Thruk Thruk 1.88 Thruk Thruk 1.88-2 Thruk Thruk 1.88-3 Thruk Thruk 1.88-4 Thruk Thruk 2.00 Thruk Thruk 2.00-2 Thruk Thruk 2.02 Thruk Thruk 2.04 Thruk Thruk 2.06 Thruk Thruk 2.08 Thruk Thruk 2.10 Thruk Thruk 2.10-2 Thruk Thruk 2.12 Thruk Thruk 2.12-2 Thruk Thruk 2.12-3 Thruk Thruk 2.14 Thruk Thruk 2.14-2 Thruk Thruk 2.16 Thruk Thruk 2.16-2 Thruk Thruk 2.18 Thruk Thruk 2.20 Thruk Thruk 2.20-2 Thruk Thruk 2.22 Thruk Thruk 2.24 Thruk Thruk 2.24-2 Thruk Thruk 2.26 Thruk Thruk 2.26-2 Thruk Thruk 2.28 Thruk Thruk 2.30 Thruk Thruk 2.30-2 Thruk Thruk 2.30-3 Thruk Thruk 2.32 Thruk Thruk 2.32-2 Thruk Thruk 2.32-3 Thruk Thruk 2.34 Thruk Thruk 2.34-2 Thruk Thruk 2.34-3 Thruk Thruk 2.36 Thruk Thruk 2.38 Thruk Thruk 2.38-2 Thruk Thruk 2.40 Thruk Thruk 2.40-2 Thruk Thruk 2.42 Thruk Thruk 2.42-2 Thruk Thruk 2.44 Thruk Thruk 2.44-2 Thruk Thruk 2.44-3 Thruk Thruk 2.46 Thruk Thruk 2.46-2 Thruk Thruk 2.46.3 Thruk Thruk 2.48 Thruk Thruk 2.48.2 Thruk Thruk 2.48.3 Thruk Thruk 2.50 Thruk Thruk 3.00 Thruk Thruk 3.02 Thruk Thruk 3.04 Thruk Thruk 3.06 Thruk Thruk 3.06.2	197

Summary

Vulnerable Configurations

References