{"id":"CVE-2024-55602","summary":"PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal","details":"PwnDoc is a penetration test report generator. Prior to commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, an authenticated user who is able to update and download templates can inject path traversal (`../`) sequences into the file extension property to read arbitrary files on the system. Commit 1d4219c596f4f518798492e48386a20c6e9a2fe6 contains a patch for the issue.","aliases":["GHSA-2mqc-gg7h-76p6"],"modified":"2026-08-12T03:51:11.620375976Z","published":"2024-12-10T16:58:12.982Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"fixed":"1d4219c596f4f518798492e48386a20c6e9a2fe6"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"GitHub_M","cwe_ids":["CWE-22"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/55xxx/CVE-2024-55602.json"},"references":[{"type":"WEB","url":"https://gist.github.com/JorianWoltjer/8a42e25c6dfa7604020d2a226e193407"},{"type":"WEB","url":"https://github.com/pwndoc/pwndoc/blob/2e7f5747d5688b1368e549c786ce7266fe5ab2b5/backend/src/routes/template.js#L103"},{"type":"WEB","url":"https://github.com/pwndoc/pwndoc/blob/2e7f5747d5688b1368e549c786ce7266fe5ab2b5/backend/src/routes/template.js#L43-L47"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/55xxx/CVE-2024-55602.json"},{"type":"ADVISORY","url":"https://github.com/pwndoc/pwndoc/security/advisories/GHSA-2mqc-gg7h-76p6"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-55602"},{"type":"FIX","url":"https://github.com/pwndoc/pwndoc/commit/1d4219c596f4f518798492e48386a20c6e9a2fe6"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pwndoc/pwndoc","events":[{"introduced":"0"},{"fixed":"1d4219c596f4f518798492e48386a20c6e9a2fe6"}],"database_specific":{"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:pwndoc_project:pwndoc:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.2.1"}]}}],"versions":["v0.5.3","v0.5.2","v0.5.1","v0.4.0","v0.5.0","v0.3.0","v0.2.0","v0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-55602.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N"}]}