Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2024-37273

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-878h-rqcq-mv3x

Jan path traversal vulnerability An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

gitlab/npm/@janhq/core/CVE-2024-37273

Jan path traversal vulnerability An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.