.. / CVE-2024-32651

Exploit for Change Detection (changedetection.io) < 0.45.21 - Unauthenticated Remote Code Execution (CVE-2024-32651)

Description:

A Server Side Template Injection in changedetection.io caused by usage of unsafe functions of Jinja2 allows Remote Command Execution on the server host.

Affected Products:

changedetection.io < 0.45.21

Proof of Concept

PoC exploit

https://github.com/zcrosman/cve-2024-32651

Nuclei Template

View the template here CVE-2024-32651.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-32651.yaml

References:

https://nvd.nist.gov/vuln/detail/CVE-2024-32651
https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-4r7v-whpg-8rx3
https://github.com/dgtlmoon/changedetection.io/releases/tag/0.45.21
https://www.onsecurity.io/blog/server-side-template-injection-with-jinja2

.. / CVE-2024-32651 if(localStorage["style"]=="true"){ document.getElementById('pagestyle').setAttribute('href','/assets/styleDark.css'); document.querySelector('input[type="checkbox"]').checked = true }