PT-2023-25178 · Remult · Remult

Chrisrimmer · Publicado 2023-06-20 · Atualizado 2023-07-05 · CVE-2023-35167

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Remult versions prior to 0.20.6

Description The issue allows an attacker who knows the id of an entity instance they are not authorized to access to gain read, update, and delete access to it. This occurs when the apiPrefilter option of the @Entity decorator is set to a function that returns a filter intended to prevent unauthorized access to data.

Recommendations For versions prior to 0.20.6, set the apiPrefilter option to a filter object instead of a function as a workaround. Update to version 0.20.6 to fix the issue.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2023-35167

GHSA-7HH3-3X64-V2G9

Produtos afetados

Remult

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/35xxx/CVE-2023-35167.json · Exploit
• https://github.com/remult/remult/releases/tag/v0.20.6 · Nota
• https://github.com/remult/remult · Nota
• https://github.com/remult/remult/commit/6892ae97134126d8710ef7302bb2fc37730994c5 · Correção
• https://github.com/remult/remult/security/advisories/GHSA-7hh3-3x64-v2g9 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-35167 · Nota de Segurança
• https://t.me/cvenotify/53013 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-7hh3-3x64-v2g9 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-35167 · Aviso do Fabricante