PT-2019-13081 · Tightrope · Tightrope Media Carousel

Publicado 2019-08-26 · Atualizado 2019-09-06 · CVE-2019-13020

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Tightrope Media Carousel versions prior to 7.1.3

Description The issue concerns the fetch API in Tightrope Media Carousel, which is susceptible to Server-Side Request Forgery (SSRF) attacks via the CarouselAPI/v0/fetch?url= endpoint. This could be exploited in two main ways: first, through a phishing attack where a specially crafted URL is used to serve malicious content from an attacker-controlled system, potentially hijacking the trust between the user, browser, and website; second, by allowing an attacker to bypass firewall controls and proxy traffic into the internal network from the internet without authentication.

Recommendations For versions prior to 7.1.3, update to version 7.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the CarouselAPI/v0/fetch?url= endpoint to minimize the risk of exploitation.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2019-13020

Produtos afetados

Tightrope Media Carousel

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-13020 · Aviso do Fabricante
• https://carouselsignage.com/release-notes/carousel-7-1-3 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13020 · Nota de Segurança