https://ethanh.co.za/tags/cve-2024-34710/Recent content in CVE-2024-34710 on EthanHHugo -- gohugo.ioenEthanHTue, 23 Jul 2024 23:30:00 +0600https://ethanh.co.za/posts/exploiting-the-context/Tue, 23 Jul 2024 23:30:00 +0600https://ethanh.co.za/posts/exploiting-the-context/Exploiting the Complex: The WikiJs CSTI Vulnerability Preface In today’s tech landscape, integrating front-end and back-end technologies often necessitates complex systems. However, these intricate systems can also introduce new and exotic vulnerabilities. In this post, we’ll explore a case where a sophisticated yet complex system in the widely-used Wiki.js framework led to a critical 0-day vulnerability—CVE-2024-34710. Background Wiki.js is a powerful wiki framework built with Vue.js for the front end and Node.