Vulnerabilities

TI-2024-24788 CVE-2024-37273 · GHSA-878h-rqcq-mv3x

An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan…

HIGH 82

An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00989 Published 2024-06-04 No fix listed CWE-94

TI-2024-24429 CVE-2024-36858 · GHSA-qfjh-mvq6-c5p8

An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan…

HIGH 82

An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03035 Published 2024-06-04 No fix listed CWE-434

TI-2024-24428 CVE-2024-36857 · GHSA-5jqc-qj57-4hrc

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.

HIGH 72

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02054 Published 2024-06-04 No fix listed CWE-31

Vulnerabilities

Filters

An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan…

An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan…

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.