critical9.1Public exploit code
CVE-2024-40422
The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path traversal attack.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Devika v1 - Path Traversal via 'snapshot_path'2024-08-04 · webapps · python
Impact
The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path traversal attack. An attacker can manipulate the snapshot_path parameter to traverse directories and access sensitive files on the server. This can potentially lead to unauthorized access to critical system files and compromise the confidentiality and integrity of the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stitionai | Devika | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/alpernae/CVE-2024-40422
- https://github.com/stitionai/devika
- https://github.com/stitionai/devika/pull/619
- https://medium.com/@alpernae/uncovering-path-traversal-in-devika-v1-a-deep-dive-into-cve-2024-40422-f8ce81398b99
- https://github.com/alpernae/CVE-2024-40422
- https://github.com/stitionai/devika
- https://github.com/stitionai/devika/pull/619