CVE-2024-40641

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL. In affected versions it a way to execute code template without -code option and signature has been discovered. Some web applications inherit from Nuclei and allow users to edit and execute workflow files. In this case, users can execute arbitrary commands. (Although, as far as I know, most web applications use -t to execute). This issue has been addressed in version 3.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
projectdiscovery	nuclei	>= 3.0.0, < 3.3.0
projectdiscovery	nuclei	>= 3.0.0, < 3.3.0

References

Timeline

Published: Jul 17, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-406428.1The netty incubator codec.bhttp is a java language binary http parser. In affected versions the `BinaryHttpParser` class does not properly v CVE-2024-406439.6Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that "<" followed by a non letter charact CVE-2024-406446.8gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. `gix-path` can be tricked into running another `git.exe` placed in CVE-2024-406458.8FOG is a cloning/imaging/rescue suite/inventory management system. An improperly restricted file upload feature allows authenticated users t CVE-2024-406468.6Vertex is a management tool for PT (Private Tracker) users to manage streaming and watching videos. Versions prior to commit fbde301b97986d5 CVE-2024-406475.3sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Python SDK < 2.8.0 allows the environment variables to be passed to s CVE-2024-406485.4matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The `UserIdentity::is_verified()` method in the matrix-sdk-c CVE-2024-406498.4In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the CVE-2024-40658.8A vulnerability was found in Tenda AC8 16.03.34.09. It has been rated as critical. This issue affects the function formSetRebootTimer of the CVE-2024-406507.8In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could lead to local escala CVE-2024-406518.4In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the CVE-2024-406527.8In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a m