PT-2023-31519 · Bazarr · Bazarr

Sylwia Budzynska · Publicado 2023-12-15 · Atualizado 2023-12-19 · CVE-2023-50266

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bazarr versions 1.2.4 through 1.3.0

Description Bazarr manages and downloads subtitles. The proxy method in bazarr/bazarr/app/ui.py does not validate the user-controlled protocol and url variables and passes them to requests.get() without any sanitization, which leads to a blind server-side request forgery (SSRF). This issue allows for crafting GET requests to internal and external resources on behalf of the server.

Recommendations For versions 1.2.4 through 1.3.0, consider disabling the proxy method in bazarr/bazarr/app/ui.py until a full fix is available. For version 1.3.1, although it contains a partial fix, it is still recommended to restrict access to the proxy method to minimize the risk of exploitation, as the vulnerability is limited to HTTP/HTTPS protocols.

Exploit

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2023-50266

Produtos afetados

Bazarr

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50266.json · Exploit
• https://github.com/morpheus65535/bazarr/releases/tag/v1.3.1 · Nota
• https://github.com/morpheus65535/bazarr/commit/17add7fbb3ae1919a40d505470d499d46df9ae6b · Correção
• https://twitter.com/CVEnew/status/1735946015633739944 · Publicação no Twitter
• https://t.me/cvenotify/63843 · Publicação no Telegram
• https://securitylab.github.com/advisories/GHSL-2023-192_GHSL-2023-194_bazarr · Correção
• https://osv.dev/vulnerability/CVE-2023-50266 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-50266 · Nota de Segurança