PT-2023-31518 · Bazarr · Bazarr

Sylwia Budzynska · Publicado 2023-12-15 · Atualizado 2023-12-19 · CVE-2023-50265

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bazarr versions prior to 1.3.1

Description The issue arises from the lack of validation of the user-controlled filename variable in the /api/swaggerui/static endpoint, which is located in bazarr/app/ui.py. This oversight allows the variable to be used in the send file function, resulting in an arbitrary file read on the system.

Recommendations For versions prior to 1.3.1, update to version 1.3.1 to resolve the issue. As a temporary workaround, consider restricting access to the /api/swaggerui/static endpoint until the update is applied. Avoid using the filename variable in the affected endpoint until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-50265

Produtos afetados

Bazarr

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50265.json · Exploit
• 🔥 https://securitylab.github.com/advisories/GHSL-2023-192_GHSL-2023-194_bazarr · Exploit
• https://github.com/morpheus65535/bazarr/releases/tag/v1.3.1 · Nota
• https://github.com/morpheus65535/bazarr/commit/17add7fbb3ae1919a40d505470d499d46df9ae6b · Correção
• https://t.me/cvenotify/64263 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-50265 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1735946016619405529 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-50265 · Nota de Segurança
• https://t.me/cvenotify/63842 · Publicação no Telegram