CVE-2024-43405 is a high-severity vulnerability affecting Nuclei, a popular YAML-based vulnerability scanner, specifically versions 3.0.0 through 3.3.1. This flaw allows an attacker to bypass the template signature verification system, potentially leading to arbitrary code execution via malicious custom code templates. The vulnerability, rated 7.8 HIGH (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), stems from a discrepancy in how Nuclei handles newline characters and multiple signatures, enabling injection of malicious content while maintaining a valid signature for benign parts of a template. While not currently listed on CISA's KEV catalog or having public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered significant community discussion and media coverage, indicating high awareness and potential for future exploitation. Users are urged to update to Nuclei v3.3.2 immediately or disable custom code templates as a workaround.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 3.0.0, < 3.3.2CPE matchmatch criteria | cpe:2.3:a:projectdiscovery:nuclei:*:*:*:*:*:go:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.