CVE-2024-56331
1 advisory.
npm/uptime-kuma CVE-2024-56331: medium 6.8
uptime-kuma vulnerable to Local File Inclusion (LFI) via Improper URL Handling in `Real-Browser` monitor
Action: Upgrade uptime-kuma to 1.23.16 or later.
npm i uptime-kuma@1.23.16npm i uptime-kuma@2.0.0-beta.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.23.0 | 1.23.16 | - |
| 2.0.0-beta.0 | 2.0.0-beta.1 | - |
Fixed versions
| 1.23.16 | 2.0.0-beta.1 |
Sources
- osv: GHSA-2qgm-m29m-cj2h
- https://github.com/louislam/uptime-kuma/security/advisories/GHSA-2qgm-m29m-cj2h
- https://nvd.nist.gov/vuln/detail/CVE-2024-56331
- https://github.com/louislam/uptime-kuma/commit/6cfae01a0d3727c517afe512fc8fec1d99acf875
- https://github.com/louislam/uptime-kuma
- https://github.com/louislam/uptime-kuma/releases/tag/1.23.16
CVE-2024-56331 · published · modified · JSON