Executive brief
Pterodactyl Wings vulnerable to improper isolation of server file access in github.com/pterodactyl/wings
Affected products
- Go github.com/pterodactyl/wings
Junglewise Threat Intelligence
CVE-2024-27102: GO-2024-2642 - Pterodactyl Wings vulnerable to improper isolation of server file access in github.com/pterodactyl/wings
CVE-2024-27102 · Severity: low · CVSS 3.1 · Published 2024-06-04
Technologies: github.com/pterodactyl/wings (Go). Vendors: Go.
Related threats
- Pterodactyl Wings denial of service in SFTP handshake
- Pterodactyl Wings sensitive information disclosure in egg templates
- Pterodactyl Wings memory exhaustion in configuration file parsers
- Pterodactyl Panel and Wings privilege escalation via JWT scope reuse
- GO-2026-5814 - Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container in github.com/pterodactyl/wing