PT-2023-30242 · Apache · Apache Allura

Stefan Schiller · Publicado 2023-11-07 · Atualizado 2024-04-18 · CVE-2023-46851

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Allura versions 1.0.1 through 1.15.0

Description The issue allows project administrators to import attachments with unrestricted URL values, potentially causing Apache Allura to read local files and expose them. This exposure can lead to other exploits, such as session hijacking or remote code execution.

Recommendations For versions 1.0.1 through 1.15.0, upgrade to version 1.16.0 to fix the issue. If upgrading is not possible, set "disable entry points.allura.importers = forge-tracker, forge-discussion" in the .ini config file as a temporary workaround.

Correção

Information Disclosure

RCE

Enumeração de Fraquezas

CWE-73

CWE-200

CWE-20

Identificadores relacionados

CVE-2023-46851

Produtos afetados

Apache Allura

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-46851 · Nota de Segurança
• https://allura.apache.org/posts/2023-allura-1.16.0.html · Aviso do Fabricante
• https://twitter.com/a0xnirudh/status/1780989873781936144 · Publicação no Twitter
• https://twitter.com/autumn_good_35/status/1780626370416279843 · Publicação no Twitter
• https://lists.apache.org/thread/hqk0vltl7qgrq215zgwjfoj0khbov0gx · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-46851 · Aviso do Fabricante