Fluid Attacks Database

Description

Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
go	github.com/projectdiscovery/nuclei	>=3.0.0 <3.3.2	3.3.2
go	github.com/projectdiscovery/nuclei/v3	>=3.0.0 <3.3.2	3.3.2
go	github.com/projectdiscovery/nuclei/v2	-	-

Aliases

1. CVE-2024-434052. NVD-2024-434053. OSV-2024-434054. OSV-GO-2024-31145. GHSA-7h5p-mmpp-hgmm6. GCVE-2024-434057. GHSA-7h5p-mmpp-hgmm

References

1. https://github.com/projectdiscovery/nuclei/commit/0da993afe6d41b4b1b814e8fad23a2acba13c60a2. https://github.com/projectdiscovery/nuclei3. https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-7h5p-mmpp-hgmm4. https://pkg.go.dev/vuln/GO-2024-3114

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.