high6.5
CVE-2024-36814
Adguard Home arbitrary file read vulnerability
Impact
An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/AdguardTeam/AdGuardHome | < 0.107.53 | 0.107.53 |
Affected products
| Product | Affected versions |
|---|---|
| Adguard Home | before 0.107.52 |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/AdguardTeam/AdGuardHome/
- https://github.com/AdguardTeam/AdGuardHome/blob/7c002e1a99b9b4e4a40e8c66851eda33e666d52d/internal/filtering/http.go#L23C1-L51C2
- https://github.com/itz-d0dgy/
- https://happy-little-accidents.pages.dev/posts/CVE-2024-36814/
- https://github.com/advisories/GHSA-9cp9-8gw2-8v7m
- https://nvd.nist.gov/vuln/detail/CVE-2024-36814
- https://github.com/AdguardTeam/AdGuardHome
- https://github.com/itz-d0dgy
- https://happy-little-accidents.pages.dev/posts/CVE-2024-36814
- https://github.com/AdguardTeam/AdGuardHome/commit/e8fd4b187287a562cbe9018999e5ea576b4c7d68
- https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.53
- https://pkg.go.dev/vuln/GO-2024-3184