PT-2017-14965 · Trape · Trape

Publicado 2017-12-16 · Atualizado 2018-01-04 · CVE-2017-17714

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Trape versions prior to 2017-11-05

Description The issue allows for XSS attacks through various parameters and HTTP headers, including the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon parameter, the /register org parameter, the /register query parameter, the /register region parameter, the /register regionName parameter, the /register timezone parameter, the /register vId parameter, the /register zip parameter, or the /tping id parameter.

Recommendations For Trape versions prior to 2017-11-05, update to a version released after 2017-11-05 to resolve the issue. As a temporary workaround, consider restricting access to the affected API endpoints, such as /nr, /register, and /tping, until a patch is available. Avoid using the vulnerable parameters, such as red, vId, User-Agent, country, countryCode, cpu, isp, lat, lon, org, query, region, regionName, timezone, and zip, in the affected API endpoints until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-17714

Produtos afetados

Trape

Referências · 5

• 🔥 https://seekurity.com/blog/general/cve-2017-17713-and-cve-2017-17714-multiple-sql-injections-and-xss-vulnerabilities-found-in-the-hackers-tracking-tool-trape-boxug · Exploit
• 🔥 https://youtube.com/watch?v=Txp6IwR24jY · Exploit
• https://github.com/boxug/trape/commit/628149159ba25adbfc29a3ae1d4b10c7eb936dd3 · Correção
• https://osv.dev/vulnerability/CVE-2017-17714 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-17714 · Nota de Segurança