{"uuid": "fe233734-92b8-4cc6-b901-dc64bac7d02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-30851", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/jasmin_ransomware_dir_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"chebuya\", \"h00die\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"The Jasmin Ransomware web server contains an unauthenticated directory traversal vulnerability\\n          within the download functionality. As of April 15, 2024 this was still unpatched, so all\\n          versions are vulnerable. The last patch was in 2021, so it will likely not ever be patched.\", \"disclosure_date\": \"2023-04-08\", \"fullname\": \"auxiliary/gather/jasmin_ransomware_dir_traversal\", \"is_install_path\": true, \"mod_time\": \"2024-05-04 16:06:48 +0000\", \"name\": \"Jasmin Ransomware Web Server Unauthenticated Directory Traversal\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/gather/jasmin_ransomware_dir_traversal.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/jasmin_ransomware_dir_traversal\", \"references\": [\"CVE-2024-30851\", \"URL-https://github.com/chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc\", \"URL-https://github.com/codesiddhant/Jasmin-Ransomware\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:16.254679Z"}