PT-2023-20532 · Unknown · Geokit-Rails

Calum Hutton · Publicado 2023-10-05 · Atualizado 2023-10-13 · CVE-2023-26153

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions geokit-rails versions prior to 2.5.0

Description The issue is related to Command Injection due to unsafe deserialization of YAML within the geo location cookie. This can be exploited remotely via a malicious cookie value, allowing an attacker to execute commands on the host system.

Recommendations For versions prior to 2.5.0, update to version 2.5.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the geo location cookie to minimize the risk of exploitation.

Exploit

Correção

OS Command Injection

Deserialization of Untrusted Data

Command Injection

Enumeração de Fraquezas

CWE-78

CWE-502

CWE-77

Identificadores relacionados

CVE-2023-26153

GHSA-7XVC-V44J-46FH

Produtos afetados

Geokit-Rails

Referências · 14

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/geokit-rails/CVE-2023-26153.yml · Exploit
• 🔥 https://security.snyk.io/vuln/SNYK-RUBY-GEOKITRAILS-5920323 · Exploit
• 🔥 https://gist.github.com/CalumHutton/b7aa1c2e71c8d4386463ac14f686901d · Exploit
• https://github.com/geokit/geokit-rails/commit/a93dfe49fb9aeae7164e2f8c4041450a04b5482f · Correção
• https://github.com/geokit/geokit-rails/commit/7ffc5813e57f6f417987043e1039925fd0865c43 · Correção
• https://github.com/geokit/geokit-rails/blob/master/lib/geokit-rails/ip_geocode_lookup.rb%23L37 · Nota
• https://github.com/geokit/geokit-rails/blob/master/lib/geokit-rails/ip_geocode_lookup.rb#L37 · Nota
• https://github.com/geokit/geokit-rails · Nota
• https://twitter.com/CVEnew/status/1710161676434297242 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-26153 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-26153 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1710242511195603261 · Publicação no Twitter
• https://osv.dev/vulnerability/GHSA-7xvc-v44j-46fh · Aviso do Fabricante
• https://github.com/advisories/GHSA-7xvc-v44j-46fh · Nota