Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-23822

Thruk is a multibackend monitoring webinterface. Prior to 3.12, the Thruk web monitoring application presents a vulnerability in a file upload form that allows a threat actor to arbitrarily upload files to the server to any path they desire and have permissions for. This vulnerability is known as Path Traversal or Directory Traversal. Version 3.12 fixes the issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.1%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2024-23822
  • Thruk » Thruk » Version: 0.01
    cpe:2.3:a:thruk:thruk:0.01
  • Thruk » Thruk » Version: 0.10_1
    cpe:2.3:a:thruk:thruk:0.10_1
  • Thruk » Thruk » Version: 0.10_2
    cpe:2.3:a:thruk:thruk:0.10_2
  • Thruk » Thruk » Version: 0.10_3
    cpe:2.3:a:thruk:thruk:0.10_3
  • Thruk » Thruk » Version: 0.10_4
    cpe:2.3:a:thruk:thruk:0.10_4
  • Thruk » Thruk » Version: 0.10_5
    cpe:2.3:a:thruk:thruk:0.10_5
  • Thruk » Thruk » Version: 0.10_6
    cpe:2.3:a:thruk:thruk:0.10_6
  • Thruk » Thruk » Version: 0.11_0
    cpe:2.3:a:thruk:thruk:0.11_0
  • Thruk » Thruk » Version: 0.20_0
    cpe:2.3:a:thruk:thruk:0.20_0
  • Thruk » Thruk » Version: 0.20_1
    cpe:2.3:a:thruk:thruk:0.20_1
  • Thruk » Thruk » Version: 0.20_3
    cpe:2.3:a:thruk:thruk:0.20_3
  • Thruk » Thruk » Version: 0.21_1
    cpe:2.3:a:thruk:thruk:0.21_1
  • Thruk » Thruk » Version: 0.21_2
    cpe:2.3:a:thruk:thruk:0.21_2
  • Thruk » Thruk » Version: 0.23_2
    cpe:2.3:a:thruk:thruk:0.23_2
  • Thruk » Thruk » Version: 0.23_3
    cpe:2.3:a:thruk:thruk:0.23_3
  • Thruk » Thruk » Version: 0.25_1
    cpe:2.3:a:thruk:thruk:0.25_1
  • Thruk » Thruk » Version: 0.27_1
    cpe:2.3:a:thruk:thruk:0.27_1
  • Thruk » Thruk » Version: 0.27_2
    cpe:2.3:a:thruk:thruk:0.27_2
  • Thruk » Thruk » Version: 0.27_3
    cpe:2.3:a:thruk:thruk:0.27_3
  • Thruk » Thruk » Version: 0.30
    cpe:2.3:a:thruk:thruk:0.30
  • Thruk » Thruk » Version: 0.31
    cpe:2.3:a:thruk:thruk:0.31
  • Thruk » Thruk » Version: 0.32
    cpe:2.3:a:thruk:thruk:0.32
  • Thruk » Thruk » Version: 0.34
    cpe:2.3:a:thruk:thruk:0.34
  • Thruk » Thruk » Version: 0.40
    cpe:2.3:a:thruk:thruk:0.40
  • Thruk » Thruk » Version: 0.42
    cpe:2.3:a:thruk:thruk:0.42
  • Thruk » Thruk » Version: 0.44
    cpe:2.3:a:thruk:thruk:0.44
  • Thruk » Thruk » Version: 0.46
    cpe:2.3:a:thruk:thruk:0.46
  • Thruk » Thruk » Version: 0.48
    cpe:2.3:a:thruk:thruk:0.48
  • Thruk » Thruk » Version: 0.50
    cpe:2.3:a:thruk:thruk:0.50
  • Thruk » Thruk » Version: 0.52
    cpe:2.3:a:thruk:thruk:0.52
  • Thruk » Thruk » Version: 0.54
    cpe:2.3:a:thruk:thruk:0.54
  • Thruk » Thruk » Version: 0.56
    cpe:2.3:a:thruk:thruk:0.56
  • Thruk » Thruk » Version: 0.58
    cpe:2.3:a:thruk:thruk:0.58
  • Thruk » Thruk » Version: 0.60
    cpe:2.3:a:thruk:thruk:0.60
  • Thruk » Thruk » Version: 0.62
    cpe:2.3:a:thruk:thruk:0.62
  • Thruk » Thruk » Version: 0.64
    cpe:2.3:a:thruk:thruk:0.64
  • Thruk » Thruk » Version: 0.66
    cpe:2.3:a:thruk:thruk:0.66
  • Thruk » Thruk » Version: 0.68
    cpe:2.3:a:thruk:thruk:0.68
  • Thruk » Thruk » Version: 0.70
    cpe:2.3:a:thruk:thruk:0.70
  • Thruk » Thruk » Version: 0.70.1
    cpe:2.3:a:thruk:thruk:0.70.1
  • Thruk » Thruk » Version: 0.72
    cpe:2.3:a:thruk:thruk:0.72
  • Thruk » Thruk » Version: 0.72.1
    cpe:2.3:a:thruk:thruk:0.72.1
  • Thruk » Thruk » Version: 0.72.2
    cpe:2.3:a:thruk:thruk:0.72.2
  • Thruk » Thruk » Version: 0.74
    cpe:2.3:a:thruk:thruk:0.74
  • Thruk » Thruk » Version: 0.76
    cpe:2.3:a:thruk:thruk:0.76
  • Thruk » Thruk » Version: 0.76.1
    cpe:2.3:a:thruk:thruk:0.76.1
  • Thruk » Thruk » Version: 0.78
    cpe:2.3:a:thruk:thruk:0.78
  • Thruk » Thruk » Version: 0.78.1
    cpe:2.3:a:thruk:thruk:0.78.1
  • Thruk » Thruk » Version: 0.78.2
    cpe:2.3:a:thruk:thruk:0.78.2
  • Thruk » Thruk » Version: 0.80
    cpe:2.3:a:thruk:thruk:0.80
  • Thruk » Thruk » Version: 0.82
    cpe:2.3:a:thruk:thruk:0.82
  • Thruk » Thruk » Version: 0.82.1
    cpe:2.3:a:thruk:thruk:0.82.1
  • Thruk » Thruk » Version: 0.84
    cpe:2.3:a:thruk:thruk:0.84
  • Thruk » Thruk » Version: 0.86
    cpe:2.3:a:thruk:thruk:0.86
  • Thruk » Thruk » Version: 0.90
    cpe:2.3:a:thruk:thruk:0.90
  • Thruk » Thruk » Version: 0.92
    cpe:2.3:a:thruk:thruk:0.92
  • Thruk » Thruk » Version: 0.94
    cpe:2.3:a:thruk:thruk:0.94
  • Thruk » Thruk » Version: 0.94.1
    cpe:2.3:a:thruk:thruk:0.94.1
  • Thruk » Thruk » Version: 0.94.2
    cpe:2.3:a:thruk:thruk:0.94.2
  • Thruk » Thruk » Version: 0.94.3
    cpe:2.3:a:thruk:thruk:0.94.3
  • Thruk » Thruk » Version: 0.94.4
    cpe:2.3:a:thruk:thruk:0.94.4
  • Thruk » Thruk » Version: 1.0.0
    cpe:2.3:a:thruk:thruk:1.0.0
  • Thruk » Thruk » Version: 1.0.1
    cpe:2.3:a:thruk:thruk:1.0.1
  • Thruk » Thruk » Version: 1.0.2
    cpe:2.3:a:thruk:thruk:1.0.2
  • Thruk » Thruk » Version: 1.0.3
    cpe:2.3:a:thruk:thruk:1.0.3
  • Thruk » Thruk » Version: 1.0.4
    cpe:2.3:a:thruk:thruk:1.0.4
  • Thruk » Thruk » Version: 1.0.5
    cpe:2.3:a:thruk:thruk:1.0.5
  • Thruk » Thruk » Version: 1.0.6
    cpe:2.3:a:thruk:thruk:1.0.6
  • Thruk » Thruk » Version: 1.0.7
    cpe:2.3:a:thruk:thruk:1.0.7
  • Thruk » Thruk » Version: 1.0.8
    cpe:2.3:a:thruk:thruk:1.0.8
  • Thruk » Thruk » Version: 1.0.9
    cpe:2.3:a:thruk:thruk:1.0.9
  • Thruk » Thruk » Version: 1.1.0
    cpe:2.3:a:thruk:thruk:1.1.0
  • Thruk » Thruk » Version: 1.1.1
    cpe:2.3:a:thruk:thruk:1.1.1
  • Thruk » Thruk » Version: 1.1.2
    cpe:2.3:a:thruk:thruk:1.1.2
  • Thruk » Thruk » Version: 1.1.3
    cpe:2.3:a:thruk:thruk:1.1.3
  • Thruk » Thruk » Version: 1.1.4
    cpe:2.3:a:thruk:thruk:1.1.4
  • Thruk » Thruk » Version: 1.1.5
    cpe:2.3:a:thruk:thruk:1.1.5
  • Thruk » Thruk » Version: 1.1.6
    cpe:2.3:a:thruk:thruk:1.1.6
  • Thruk » Thruk » Version: 1.1.7
    cpe:2.3:a:thruk:thruk:1.1.7
  • Thruk » Thruk » Version: 1.18
    cpe:2.3:a:thruk:thruk:1.18
  • Thruk » Thruk » Version: 1.20
    cpe:2.3:a:thruk:thruk:1.20
  • Thruk » Thruk » Version: 1.22
    cpe:2.3:a:thruk:thruk:1.22
  • Thruk » Thruk » Version: 1.24
    cpe:2.3:a:thruk:thruk:1.24
  • Thruk » Thruk » Version: 1.26
    cpe:2.3:a:thruk:thruk:1.26
  • Thruk » Thruk » Version: 1.28
    cpe:2.3:a:thruk:thruk:1.28
  • Thruk » Thruk » Version: 1.30
    cpe:2.3:a:thruk:thruk:1.30
  • Thruk » Thruk » Version: 1.32
    cpe:2.3:a:thruk:thruk:1.32
  • Thruk » Thruk » Version: 1.34
    cpe:2.3:a:thruk:thruk:1.34
  • Thruk » Thruk » Version: 1.36
    cpe:2.3:a:thruk:thruk:1.36
  • Thruk » Thruk » Version: 1.38
    cpe:2.3:a:thruk:thruk:1.38
  • Thruk » Thruk » Version: 1.40
    cpe:2.3:a:thruk:thruk:1.40
  • Thruk » Thruk » Version: 1.42
    cpe:2.3:a:thruk:thruk:1.42
  • Thruk » Thruk » Version: 1.44
    cpe:2.3:a:thruk:thruk:1.44
  • Thruk » Thruk » Version: 1.46
    cpe:2.3:a:thruk:thruk:1.46
  • Thruk » Thruk » Version: 1.48
    cpe:2.3:a:thruk:thruk:1.48
  • Thruk » Thruk » Version: 1.50
    cpe:2.3:a:thruk:thruk:1.50
  • Thruk » Thruk » Version: 1.52
    cpe:2.3:a:thruk:thruk:1.52
  • Thruk » Thruk » Version: 1.54
    cpe:2.3:a:thruk:thruk:1.54
  • Thruk » Thruk » Version: 1.56
    cpe:2.3:a:thruk:thruk:1.56
  • Thruk » Thruk » Version: 1.58
    cpe:2.3:a:thruk:thruk:1.58
  • Thruk » Thruk » Version: 1.60
    cpe:2.3:a:thruk:thruk:1.60
  • Thruk » Thruk » Version: 1.60.2
    cpe:2.3:a:thruk:thruk:1.60.2
  • Thruk » Thruk » Version: 1.62
    cpe:2.3:a:thruk:thruk:1.62
  • Thruk » Thruk » Version: 1.64
    cpe:2.3:a:thruk:thruk:1.64
  • Thruk » Thruk » Version: 1.64-2
    cpe:2.3:a:thruk:thruk:1.64-2
  • Thruk » Thruk » Version: 1.66
    cpe:2.3:a:thruk:thruk:1.66
  • Thruk » Thruk » Version: 1.66-2
    cpe:2.3:a:thruk:thruk:1.66-2
  • Thruk » Thruk » Version: 1.68
    cpe:2.3:a:thruk:thruk:1.68
  • Thruk » Thruk » Version: 1.70
    cpe:2.3:a:thruk:thruk:1.70
  • Thruk » Thruk » Version: 1.70-2
    cpe:2.3:a:thruk:thruk:1.70-2
  • Thruk » Thruk » Version: 1.70-3
    cpe:2.3:a:thruk:thruk:1.70-3
  • Thruk » Thruk » Version: 1.70-4
    cpe:2.3:a:thruk:thruk:1.70-4
  • Thruk » Thruk » Version: 1.72
    cpe:2.3:a:thruk:thruk:1.72
  • Thruk » Thruk » Version: 1.72-2
    cpe:2.3:a:thruk:thruk:1.72-2
  • Thruk » Thruk » Version: 1.74
    cpe:2.3:a:thruk:thruk:1.74
  • Thruk » Thruk » Version: 1.74-2
    cpe:2.3:a:thruk:thruk:1.74-2
  • Thruk » Thruk » Version: 1.76
    cpe:2.3:a:thruk:thruk:1.76
  • Thruk » Thruk » Version: 1.76-2
    cpe:2.3:a:thruk:thruk:1.76-2
  • Thruk » Thruk » Version: 1.76-3
    cpe:2.3:a:thruk:thruk:1.76-3
  • Thruk » Thruk » Version: 1.78
    cpe:2.3:a:thruk:thruk:1.78
  • Thruk » Thruk » Version: 1.78-2
    cpe:2.3:a:thruk:thruk:1.78-2
  • Thruk » Thruk » Version: 1.78-3
    cpe:2.3:a:thruk:thruk:1.78-3
  • Thruk » Thruk » Version: 1.80
    cpe:2.3:a:thruk:thruk:1.80
  • Thruk » Thruk » Version: 1.80-2
    cpe:2.3:a:thruk:thruk:1.80-2
  • Thruk » Thruk » Version: 1.80-3
    cpe:2.3:a:thruk:thruk:1.80-3
  • Thruk » Thruk » Version: 1.82
    cpe:2.3:a:thruk:thruk:1.82
  • Thruk » Thruk » Version: 1.82-2
    cpe:2.3:a:thruk:thruk:1.82-2
  • Thruk » Thruk » Version: 1.84
    cpe:2.3:a:thruk:thruk:1.84
  • Thruk » Thruk » Version: 1.84-2
    cpe:2.3:a:thruk:thruk:1.84-2
  • Thruk » Thruk » Version: 1.84-3
    cpe:2.3:a:thruk:thruk:1.84-3
  • Thruk » Thruk » Version: 1.84-4
    cpe:2.3:a:thruk:thruk:1.84-4
  • Thruk » Thruk » Version: 1.84-5
    cpe:2.3:a:thruk:thruk:1.84-5
  • Thruk » Thruk » Version: 1.84-6
    cpe:2.3:a:thruk:thruk:1.84-6
  • Thruk » Thruk » Version: 1.86
    cpe:2.3:a:thruk:thruk:1.86
  • Thruk » Thruk » Version: 1.86-2
    cpe:2.3:a:thruk:thruk:1.86-2
  • Thruk » Thruk » Version: 1.86-3
    cpe:2.3:a:thruk:thruk:1.86-3
  • Thruk » Thruk » Version: 1.86-4
    cpe:2.3:a:thruk:thruk:1.86-4
  • Thruk » Thruk » Version: 1.88
    cpe:2.3:a:thruk:thruk:1.88
  • Thruk » Thruk » Version: 1.88-2
    cpe:2.3:a:thruk:thruk:1.88-2
  • Thruk » Thruk » Version: 1.88-3
    cpe:2.3:a:thruk:thruk:1.88-3
  • Thruk » Thruk » Version: 1.88-4
    cpe:2.3:a:thruk:thruk:1.88-4
  • Thruk » Thruk » Version: 2.00
    cpe:2.3:a:thruk:thruk:2.00
  • Thruk » Thruk » Version: 2.00-2
    cpe:2.3:a:thruk:thruk:2.00-2
  • Thruk » Thruk » Version: 2.02
    cpe:2.3:a:thruk:thruk:2.02
  • Thruk » Thruk » Version: 2.04
    cpe:2.3:a:thruk:thruk:2.04
  • Thruk » Thruk » Version: 2.06
    cpe:2.3:a:thruk:thruk:2.06
  • Thruk » Thruk » Version: 2.08
    cpe:2.3:a:thruk:thruk:2.08
  • Thruk » Thruk » Version: 2.10
    cpe:2.3:a:thruk:thruk:2.10
  • Thruk » Thruk » Version: 2.10-2
    cpe:2.3:a:thruk:thruk:2.10-2
  • Thruk » Thruk » Version: 2.12
    cpe:2.3:a:thruk:thruk:2.12
  • Thruk » Thruk » Version: 2.12-2
    cpe:2.3:a:thruk:thruk:2.12-2
  • Thruk » Thruk » Version: 2.12-3
    cpe:2.3:a:thruk:thruk:2.12-3
  • Thruk » Thruk » Version: 2.14
    cpe:2.3:a:thruk:thruk:2.14
  • Thruk » Thruk » Version: 2.14-2
    cpe:2.3:a:thruk:thruk:2.14-2
  • Thruk » Thruk » Version: 2.16
    cpe:2.3:a:thruk:thruk:2.16
  • Thruk » Thruk » Version: 2.16-2
    cpe:2.3:a:thruk:thruk:2.16-2
  • Thruk » Thruk » Version: 2.18
    cpe:2.3:a:thruk:thruk:2.18
  • Thruk » Thruk » Version: 2.20
    cpe:2.3:a:thruk:thruk:2.20
  • Thruk » Thruk » Version: 2.20-2
    cpe:2.3:a:thruk:thruk:2.20-2
  • Thruk » Thruk » Version: 2.22
    cpe:2.3:a:thruk:thruk:2.22
  • Thruk » Thruk » Version: 2.24
    cpe:2.3:a:thruk:thruk:2.24
  • Thruk » Thruk » Version: 2.24-2
    cpe:2.3:a:thruk:thruk:2.24-2
  • Thruk » Thruk » Version: 2.26
    cpe:2.3:a:thruk:thruk:2.26
  • Thruk » Thruk » Version: 2.26-2
    cpe:2.3:a:thruk:thruk:2.26-2
  • Thruk » Thruk » Version: 2.28
    cpe:2.3:a:thruk:thruk:2.28
  • Thruk » Thruk » Version: 2.30
    cpe:2.3:a:thruk:thruk:2.30
  • Thruk » Thruk » Version: 2.30-2
    cpe:2.3:a:thruk:thruk:2.30-2
  • Thruk » Thruk » Version: 2.30-3
    cpe:2.3:a:thruk:thruk:2.30-3
  • Thruk » Thruk » Version: 2.32
    cpe:2.3:a:thruk:thruk:2.32
  • Thruk » Thruk » Version: 2.32-2
    cpe:2.3:a:thruk:thruk:2.32-2
  • Thruk » Thruk » Version: 2.32-3
    cpe:2.3:a:thruk:thruk:2.32-3
  • Thruk » Thruk » Version: 2.34
    cpe:2.3:a:thruk:thruk:2.34
  • Thruk » Thruk » Version: 2.34-2
    cpe:2.3:a:thruk:thruk:2.34-2
  • Thruk » Thruk » Version: 2.34-3
    cpe:2.3:a:thruk:thruk:2.34-3
  • Thruk » Thruk » Version: 2.36
    cpe:2.3:a:thruk:thruk:2.36
  • Thruk » Thruk » Version: 2.38
    cpe:2.3:a:thruk:thruk:2.38
  • Thruk » Thruk » Version: 2.38-2
    cpe:2.3:a:thruk:thruk:2.38-2
  • Thruk » Thruk » Version: 2.40
    cpe:2.3:a:thruk:thruk:2.40
  • Thruk » Thruk » Version: 2.40-2
    cpe:2.3:a:thruk:thruk:2.40-2
  • Thruk » Thruk » Version: 2.42
    cpe:2.3:a:thruk:thruk:2.42
  • Thruk » Thruk » Version: 2.42-2
    cpe:2.3:a:thruk:thruk:2.42-2
  • Thruk » Thruk » Version: 2.44
    cpe:2.3:a:thruk:thruk:2.44
  • Thruk » Thruk » Version: 2.44-2
    cpe:2.3:a:thruk:thruk:2.44-2
  • Thruk » Thruk » Version: 2.44-3
    cpe:2.3:a:thruk:thruk:2.44-3
  • Thruk » Thruk » Version: 2.46
    cpe:2.3:a:thruk:thruk:2.46
  • Thruk » Thruk » Version: 2.46-2
    cpe:2.3:a:thruk:thruk:2.46-2
  • Thruk » Thruk » Version: 2.46.3
    cpe:2.3:a:thruk:thruk:2.46.3
  • Thruk » Thruk » Version: 2.48
    cpe:2.3:a:thruk:thruk:2.48
  • Thruk » Thruk » Version: 2.48.2
    cpe:2.3:a:thruk:thruk:2.48.2
  • Thruk » Thruk » Version: 2.48.3
    cpe:2.3:a:thruk:thruk:2.48.3
  • Thruk » Thruk » Version: 2.50
    cpe:2.3:a:thruk:thruk:2.50
  • Thruk » Thruk » Version: 3.00
    cpe:2.3:a:thruk:thruk:3.00
  • Thruk » Thruk » Version: 3.02
    cpe:2.3:a:thruk:thruk:3.02
  • Thruk » Thruk » Version: 3.04
    cpe:2.3:a:thruk:thruk:3.04
  • Thruk » Thruk » Version: 3.06
    cpe:2.3:a:thruk:thruk:3.06
  • Thruk » Thruk » Version: 3.06.2
    cpe:2.3:a:thruk:thruk:3.06.2


Contact Us

Shodan ® - All rights reserved