Executive brief
Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2
Affected products
- Go github.com/projectdiscovery/nuclei/v2
- Go github.com/projectdiscovery/nuclei
Junglewise Threat Intelligence
CVE-2023-37896: GO-2023-1998 - Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2
CVE-2023-37896 · Severity: low · CVSS 3.1 · Published 2023-08-23
Technologies: github.com/projectdiscovery/nuclei/v2 (Go), github.com/projectdiscovery/nuclei (Go). Vendors: Go.
Related threats
- GO-2026-5473 - Nuclei: Environment variable disclosure via Response-Derived DSL Expressions in github.com/projectdiscovery/nuclei
- Nuclei: Local File Read via require() Module Loader Bypass
- GO-2024-3114 - Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei
- GO-2024-2989 - projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei
- GO-2024-2645 - Nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei