PT-2023-30247 · Unknown · Peppermint Ticket Management

CVE-2023-46863 · Publicado 2023-10-29 · Atualizado 2023-11-08

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Peppermint Ticket Management versions prior to 0.2.4

Description The issue allows remote attackers to read arbitrary files via a "/api/v1/users/file/download?filepath=./../" POST request. This is a significant security concern as it potentially exposes sensitive data.

Recommendations For versions prior to 0.2.4, update to version 0.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/api/v1/users/file/download" API endpoint until the update is applied. Avoid using the filepath variable in the affected API endpoint with relative paths that can be manipulated to access files outside the intended directory.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-46863

Produtos afetados

Peppermint Ticket Management

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46863.json · Exploit
• 🔥 https://github.com/Peppermint-Lab/peppermint/issues/108 · Exploit
• https://osv.dev/vulnerability/CVE-2023-46863 · Aviso do Fabricante
• https://t.me/latest_high_impact_cve/75 · Publicação no Telegram
• https://t.me/cvenotify/60169 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-46863 · Nota de Segurança