CVE-2023-37896 – Nuclei Path Traversal vulnerability

https://notcve.org/view.php?id=CVE-2023-37896

04 Aug 2023 — Nuclei is a vulnerability scanner. Prior to version 2.9.9, a security issue in the Nuclei project affected users utilizing Nuclei as Go code (SDK) running custom templates. This issue did not affect CLI users. The problem was related to sanitization issues with payload loading in sandbox mode. There was a potential risk with payloads loading in sandbox mode. • https://github.com/projectdiscovery/nuclei/pull/3927 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •