/claim #14488

Vulnerable environment shared privately

• Added CVE-2024-3408 - D-Tale Authentication Bypass and RCE
• References:
  • https://nvd.nist.gov/vuln/detail/CVE-2024-3408
  • https://huntr.com/bounties/57a06666-ff85-4577-af19-f3dfb7b02f91
  • https://github.com/man-group/dtale/commit/32bd6fb4a63de779ff1e51823a456865ea3cbd13

Template validation

• Validated with a host running a vulnerable version and/or configuration (True Positive)
• Validated with a host running a patched version and/or configuration (avoid False Positive)

Additional Details (leave it blank if not applicable)

Tested against D-Tale 3.10.0 Docker environment.

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server