x/vulndb: potential Go vuln in github.com/AdguardTeam/AdGuardHome: CVE-2024-36814

Advisory CVE-2024-36814 references a vulnerability in the following Go modules:

Module
github.com/AdguardTeam/AdGuardHome

Description: An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory.

References:

Cross references:

github.com/AdguardTeam/AdGuardHome appears in 2 other report(s):
- data/excluded/GO-2022-1061.yaml (https://github.com/golang/vulndb/issues/1061) NOT_IMPORTABLE
- data/reports/GO-2024-2924.yaml (https://github.com/golang/vulndb/issues/2924)

See doc/quickstart.md for instructions on how to triage this report.

id: GO-ID-PENDING
modules:
    - module: github.com/AdguardTeam/AdGuardHome
      vulnerable_at: 0.107.53
summary: CVE-2024-36814 in github.com/AdguardTeam/AdGuardHome
cves:
    - CVE-2024-36814
references:
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-36814
    - web: https://github.com/AdguardTeam/AdGuardHome/
    - web: https://github.com/AdguardTeam/AdGuardHome/blob/7c002e1a99b9b4e4a40e8c66851eda33e666d52d/internal/filtering/http.go#L23C1-L51C2
    - web: https://github.com/itz-d0dgy/
    - web: https://happy-little-accidents.pages.dev/posts/CVE-2024-36814/
source:
    id: CVE-2024-36814
    created: 2024-10-08T20:01:21.974935094Z
review_status: UNREVIEWED

golang / vulndb

x/vulndb: potential Go vuln in github.com/AdguardTeam/AdGuardHome: CVE-2024-36814 #3184