CVE-2024-43405

CVE Enrichment

CVSS: 7.8 HIGH
EPSS: 1.11%
EPSS Percentile: 65.91%
CISA KEV: Not listed

Description

Nuclei is a vulnerability scanner powered by YAML based templates. Starting in version 3.0.0 and prior to version 3.3.2, a vulnerability in Nuclei's template signature verification system could allow an attacker to bypass the signature check and possibly execute malicious code via custom code template. The vulnerability is present in the template signature verification process, specifically in the `signer` package. The vulnerability stems from a discrepancy between how the signature verification process and the YAML parser handle newline characters, combined with the way multiple signatures are processed. This allows an attacker to inject malicious content into a template while maintaining a valid signature for the benign part of the template. CLI users are affected if they execute custom code templates from unverified sources. This includes templates authored by third parties or obtained from unverified repositories. SDK Users are affected if they are developers integrating Nuclei into their platforms, particularly if they permit the execution of custom code templates by end-users. The vulnerability is addressed in Nuclei v3.3.2. Users are strongly recommended to update to this version to mitigate the security risk. As an interim measure, users should refrain from using custom templates if unable to upgrade immediately. Only trusted, verified templates should be executed. Those who are unable to upgrade Nuclei should disable running custom code templates as a workaround.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 04-Sep-2024 23:15
Last Modified: 17-Jun-2026 14:50
EPSS Date: 2026-11-01
CWE: CWE-78

CVSS Vector


            CVSS:3.1                            AV:L /
                            AC:L /
                            PR:N /
                            UI:R /
                            S:U /
                            C:H /
                            I:H /
                            A:H

CNA Products / Version Status

projectdiscovery · nuclei Source: CNA · 134c704f-9b21-4f2e-91b3-4a467353bcc0
Default status: unknown

3.0.0 ≤ version < 3.3.2 — affected (custom)

CPEs: cpe:2.3:a:projectdiscovery:nuclei:*:*:*:*:*:*:*:*
projectdiscovery · nuclei Source: CNA · [email protected]
Default status: unknown

>= 3.0.0, < 3.3.2 — affected

Affected Products / Versions

projectdiscovery / nuclei Source: NVD CPE · affected
Version / affected range: * · from (inclusive) 3.0.0 · before (exclusive) 3.3.2
cpe:2.3:a:projectdiscovery:nuclei:*:*:*:*:*:go:*:*

References

Last enrichment sync: 09-Nov-2026 06:28
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

in the tool. This led us to closely examine Nuclei's codebase, resulting in the discovery of CVE-2024-43405, a high severity vulnerability with far-reaching implications. Wiz Details Nuclei Signature-Verification Bypass That Could Enable Malicious Template Execution

MITRE ATT&CK (3)

Vendors (1)

Products (1)

Tools (1)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.