CVE-2024-8374

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-8374
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-8374.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-8374
Downstream
Published
2024-09-03T10:01:12Z
Modified
2026-09-30T03:48:24Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Arbitrary Code Injection in Cura
Details

UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 are vulnerable to code injection via the 3MF format reader (/plugins/ThreeMFReader.py). The vulnerability arises from improper handling of the drop_to_buildplate property within 3MF files, which are ZIP archives containing the model data. When a 3MF file is loaded in Cura, the value of the drop_to_buildplate property is passed to the Python eval() function without proper sanitization, allowing an attacker to execute arbitrary code by crafting a malicious 3MF file. This vulnerability poses a significant risk as 3MF files are commonly shared via 3D model databases.

Database specific 
{
    "cna_assigner": "Checkmarx",
    "cwe_ids": [
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/8xxx/CVE-2024-8374.json"
}
References

Affected packages

Git / github.com/ultimaker/cura

Affected ranges

Type
GIT
Repo
https://github.com/ultimaker/cura
Events
Introduced
0fec7bd3c786ff95701ea7b54e1f8226be8b51e3
Fixed
400266affb24e12afc3ab1544162ca557de840dc
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "5.7.0-beta.1"
        },
        {
            "fixed": "5.8.0-RC1"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

5.*
5.7.0-NA
5.7.1
5.7.2-rc2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-8374.json"