Executive brief
Pterodactyl Wings vulnerable to Server-Side Request Forgery during remote file pull in github.com/pterodactyl/wings
Affected products
- Go github.com/pterodactyl/wings
Junglewise Threat Intelligence
CVE-2024-34068: GO-2024-2815 - Pterodactyl Wings vulnerable to Server-Side Request Forgery during remote file pull in github.com/pterodactyl/wings
CVE-2024-34068 · Severity: low · CVSS 3.1 · Published 2024-06-10
Technologies: github.com/pterodactyl/wings (Go). Vendors: Go.
Related threats
- Pterodactyl Wings denial of service in SFTP handshake
- Pterodactyl Wings sensitive information disclosure in egg templates
- Pterodactyl Wings memory exhaustion in configuration file parsers
- Pterodactyl Panel and Wings privilege escalation via JWT scope reuse
- GO-2026-5814 - Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container in github.com/pterodactyl/wing