VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jan 29, 2024· Updated Jun 17, 2026

CVE-2024-23822

CVE-2024-23822

Description

Thruk is a multibackend monitoring webinterface. Prior to 3.12, the Thruk web monitoring application presents a vulnerability in a file upload form that allows a threat actor to arbitrarily upload files to the server to any path they desire and have permissions for. This vulnerability is known as Path Traversal or Directory Traversal. Version 3.12 fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Thruk/Thruk
    cpe:2.3:a:thruk:thruk:*:*:*:*:*:*:*:*
    Range: <3.12
  • Sni/Thrukllm-fuzzy2 versions
    <3.12+ 1 more
    • (no CPE)range: <3.12
    • (no CPE)range: < 3.12

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.