PT-2023-18527 · Unknown · Canarytokens

Azh-R · Publicado 2023-01-06 · Atualizado 2023-01-12 · CVE-2023-22475

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Canarytokens versions prior to sha-fb61290

Description A Cross-Site Scripting issue was identified in the history page of triggered Canarytokens. An attacker who discovers an HTTP-based Canarytoken can execute Javascript in the Canarytoken's trigger history page when the history page is later visited by the Canarytoken's creator. This could be used to disable or delete the affected Canarytoken, view its activation history, or reveal more information about the Canarytoken's creator, such as their email address. The attacker could also redirect the creator towards an attacker-controlled Canarytoken to show the creator's network location.

Recommendations For versions prior to sha-fb61290, update to Canarytokens Docker images sha-fb61290 or later, which contain a patch for this issue. As a temporary workaround, consider restricting access to the history page of triggered Canarytokens until the patch is applied.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-22475

GHSA-3H2C-3FGR-74VH

GHSA-5675-3424-HPQR

Produtos afetados

Canarytokens

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/22xxx/CVE-2023-22475.json · Exploit
• https://github.com/thinkst/canarytokens/security/advisories/GHSA-5675-3424-hpqr · Nota
• https://github.com/thinkst/canarytokens/commit/fb612906f2217bbb8863199694891d16e20bad3e · Correção
• https://github.com/thinkst/canarytokens/security/advisories/GHSA-3h2c-3fgr-74vh · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2023-22475 · Nota de Segurança
• https://t.me/cvenotify/41409 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-22475 · Aviso do Fabricante
• https://t.me/cibsecurity/56049 · Publicação no Telegram