CVE-2024-47180

Shields.io is a service for concise, consistent, and legible badges in SVG and raster format. Shields.io and users self-hosting their own instance of shields using version < `server-2024-09-25` are vulnerable to a remote execution vulnerability via the JSONPath library used by the Dynamic JSON/Toml/Yaml badges. This vulnerability would allow any user with access to make a request to a URL on the instance to the ability to execute code by crafting a malicious JSONPath expression. All users who self-host an instance are vulnerable. This problem was fixed in server-2024-09-25. Those who follow the tagged releases should update to `server-2024-09-25` or later. Those who follow the rolling tag on DockerHub, `docker pull shieldsio/shields:next` to update to the latest version. As a workaround, blocking access to the endpoints `/badge/dynamic/json`, `/badge/dynamic/toml`, and `/badge/dynamic/yaml` (e.g: via a firewall or reverse proxy in front of your instance) would prevent the exploitable endpoints from being accessed.

• CWE-74

• https://github.com/badges/shields/commit/ec1b6c8daccda075403c1688ac02603f7aaa50b2
• https://github.com/badges/shields/issues/10553
• https://github.com/badges/shields/pull/10551
• https://github.com/badges/shields/security/advisories/GHSA-rxvx-x284-4445

Published

Sep 26, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47175CUPS is a standards-based, open-source printing system, and …9.8
• CVE-2024-47176CUPS is a standards-based, open-source printing system, and …5.3
• CVE-2024-47177Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-47178basic-auth-connect is Connect's Basic Auth middleware in its…5.3
• CVE-2024-47179RSSHub is an RSS network. Prior to commit 64e00e7, RSSHub's …8.8
• CVE-2024-4718A vulnerability was found in Campcodes Complete Web-Based Sc…6.1
• CVE-2024-47181Contiki-NG is an open-source, cross-platform operating syste…7.5
• CVE-2024-47182Dozzle is a realtime log viewer for docker containers. Befor…7.5
• CVE-2024-47183Parse Server is an open source backend that can be deployed …8.1
• CVE-2024-47184Ampache is a web based audio/video streaming application and…4.8
• CVE-2024-47186Filament is a collection of full-stack components for Larave…6.1
• CVE-2024-47187Suricata is a network Intrusion Detection System, Intrusion …7.5