PT-2023-28995 · Arduino · Arduino Create Agent
Giubby84
·
Publicado
2023-10-18
·
Atualizado
2023-11-02
·
CVE-2023-43802
CVSS v3.1
7.3
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L |
Name of the Vulnerable Software and Affected Versions
Arduino Create Agent versions prior to 1.3.3
Description
The issue affects the endpoint "/upload" which handles requests with the
filename parameter. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can escalate their privileges to those of the user running the Arduino Create Agent service via a crafted HTTP POST request.Recommendations
For versions prior to 1.3.3, upgrade to version 1.3.3 to resolve the issue. As a temporary workaround, consider restricting access to the "/upload" endpoint or disabling it until the upgrade is applied. Avoid using the
filename parameter in the affected API endpoint until the issue is resolved.Exploit
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Arduino Create Agent