PT-2023-29714 · Leantime · Leantime

Cyber-Brent · Publicado 2023-10-19 · Atualizado 2023-10-27 · CVE-2023-45826

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Leantime versions prior to 2.4-beta-4

Description Leantime is an open source project management system. A userId variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to "/api/jsonrpc" to exploit an SQL injection vulnerability. Confidentiality is impacted as it allows for dumping information from the database.

Recommendations For versions prior to 2.4-beta-4, upgrade to version 2.4-beta-4 to address the issue. As a temporary workaround, consider restricting access to the /api/jsonrpc endpoint until the upgrade is applied. Additionally, avoid using the userId variable in the affected API endpoint until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2023-45826

GHSA-559G-3H98-G3FJ

Produtos afetados

Leantime

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45826.json · Exploit
• https://github.com/Leantime/leantime/commit/be75f1e0f311d11c00a0bdc7079a62eef3594bf0 · Correção
• https://github.com/Leantime/leantime/security/advisories/GHSA-559g-3h98-g3fj · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-45826 · Nota de Segurança
• https://t.me/cibsecurity/72608 · Publicação no Telegram
• https://t.me/latest_high_impact_cve/36 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-45826 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1715106357509038452 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1715075162650079612 · Publicação no Twitter