Skip to content
Fencer Vulns
medium 6.5

CVE-2023-34096 json

Thruk has Path Traversal Vulnerability in panorama.pm

published 2023-06-08 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-38204

cvss
6.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
62.7%
EPSS 62.7% chance of exploitation in 30 days, percentile 99.1%
public exploits
1
Exploit-DB

Summary

Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, the file `panorama.pm` is vulnerable to a Path Traversal vulnerability which allows an attacker to upload a file to any folder which has write permissions on the affected system. The parameter location is not filtered, validated or sanitized and it accepts any kind of characters. For a path traversal attack, the only characters required were the dot (`.`) and the slash (`/`). A fix is available in version 3.06.2.

Patch / fix

  • thruk thruk 3.06.2

Timeline

  1. Published
  2. First public exploit (EDB-51509)

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
partial
Assessed
22 mo ago

Exploit prediction

62.68% chance of exploitation in the next 30 days, higher than 99.1% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-51509 Thruk Monitoring Web Interface 3.06 - Path Traversal webapps, 2023-06-09
  • github.com https://github.com/sni/Thruk/security/advisories/GHSA-vhqc-649h-994h referenced PoC, tagged "exploit" by a source, unverified
  • github.com https://github.com/sni/Thruk/blob/1bc5a5804bf9fc22e82a4eadb21a1795954f0867/plugins/plugins-available/panorama/lib/Thruk/Controller/panorama.pm#L690 referenced PoC, tagged "exploit" by a source, unverified
  • github.com https://github.com/sni/Thruk/blob/1bc5a5804bf9fc22e82a4eadb21a1795954f0867/plugins/plugins-available/panorama/lib/Thruk/Controller/panorama.pm#L705 referenced PoC, tagged "exploit" by a source, unverified
  • github.com https://github.com/sni/Thruk/blob/1bc5a5804bf9fc22e82a4eadb21a1795954f0867/plugins/plugins-available/panorama/lib/Thruk/Controller/panorama.pm#L727 referenced PoC, tagged "exploit" by a source, unverified
  • github.com https://github.com/sni/Thruk/blob/1bc5a5804bf9fc22e82a4eadb21a1795954f0867/plugins/plugins-available/panorama/lib/Thruk/Controller/panorama.pm#L735 referenced PoC, tagged "exploit" by a source, unverified
  • packetstormsecurity.com http://packetstormsecurity.com/files/172822/Thruk-Monitoring-Web-Interface-3.06-Path-Traversal.html referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
NVD 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • sni Thruk

Classification

Weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.