PT-2023-32816 · Unknown · Dfirkuiper Kuiper

Heck-Gd · Publicado 2023-12-18 · Atualizado 2024-05-17 · CVE-2023-6908

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions DFIRKuiper Kuiper version 2.3.4

Description A problematic issue was found in the TAR Archive Handler component, specifically affecting the unzip file function of the case management.py file. The manipulation of the dst path argument leads to path traversal. This issue can be initiated remotely, with a rather high complexity of attack and difficult exploitability.

Recommendations For version 2.3.4, upgrade to version 2.3.5 to address this issue. As a temporary workaround, consider restricting access to the unzip file function or the dst path argument in the case management.py file until the upgrade is applied.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-6908

Produtos afetados

Dfirkuiper Kuiper

Referências · 8

• https://github.com/DFIRKuiper/Kuiper/releases/tag/v2.3.5 · Correção
• https://github.com/DFIRKuiper/Kuiper/pull/106 · Correção
• https://github.com/DFIRKuiper/Kuiper/commit/94fa135153002f651f5526c55a7240e083db8d73 · Correção
• https://vuldb.com/?ctiid.248277 · Nota
• https://t.me/cvenotify/64985 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-6908 · Nota de Segurança
• https://vuldb.com/?id.248277 · Nota
• https://osv.dev/vulnerability/CVE-2023-6908 · Aviso do Fabricante