Go/github.com/AdguardTeam/AdGuardHome CVE-2024-36814: medium 6.5, EPSS 0.80%

Adguard Home arbitrary file read vulnerability

Action: Upgrade github.com/AdguardTeam/AdGuardHome to 0.107.53 or later.

go get github.com/AdguardTeam/AdGuardHome@v0.107.53

Affected

Fixed versions

Sources

• osv: GHSA-9cp9-8gw2-8v7m
• https://nvd.nist.gov/vuln/detail/CVE-2024-36814
• https://github.com/AdguardTeam/AdGuardHome/commit/e8fd4b187287a562cbe9018999e5ea576b4c7d68
• https://github.com/AdguardTeam/AdGuardHome
• https://github.com/AdguardTeam/AdGuardHome/blob/7c002e1a99b9b4e4a40e8c66851eda33e666d52d/internal/filtering/http.go#L23C1-L51C2
• https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.53
• https://github.com/itz-d0dgy
• https://happy-little-accidents.pages.dev/posts/CVE-2024-36814
• https://pkg.go.dev/vuln/GO-2024-3184

CVE-2024-36814 · published 2024-10-08T21:31:09Z · modified 2024-10-11T16:49:13Z · JSON