Executive brief
Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei
Affected products
- Go github.com/projectdiscovery/nuclei/v2
- Go github.com/projectdiscovery/nuclei
- Go github.com/projectdiscovery/nuclei/v3
Junglewise Threat Intelligence
CVE-2024-43405: GO-2024-3114 - Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei
CVE-2024-43405 · Severity: low · CVSS 3.1 · Published 2024-09-06
Technologies: github.com/projectdiscovery/nuclei/v2 (Go), github.com/projectdiscovery/nuclei (Go), github.com/projectdiscovery/nuclei/v3 (Go). Vendors: Go.
Related threats
- Rejected reason: Further research determined the issue results from a dependency.
- Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path in pkg/fuzz/parts.go
- Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the workflow template loading path does not enf
- Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the nuclei/mysql JavaScript library does not en
- Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply