Junglewise Threat Intelligence

CVE-2024-40641: GO-2024-2989 - projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei

CVE-2024-40641 · Severity: low · CVSS 3.1 · Published 2024-07-22

Technologies: github.com/projectdiscovery/nuclei/v3 (Go). Vendors: Go.

Executive brief

projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei

Affected products

  • Go github.com/projectdiscovery/nuclei/v2
  • Go github.com/projectdiscovery/nuclei
  • Go github.com/projectdiscovery/nuclei/v3

Related threats