PT-2023-8743 · Mastodon · Mastodon

Cure53 · Publicado 2023-07-06 · Atualizado 2024-03-06 · CVE-2023-36460

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mastodon versions 3.5.0 through 3.5.8 Mastodon versions 4.0.0 through 4.0.4 Mastodon versions 4.1.0 through 4.1.2

Description The issue arises from a flaw in the media processing code, allowing attackers to create arbitrary files at any location using carefully crafted media files. This can lead to Denial of Service and arbitrary Remote Code Execution. The vulnerability is caused by an error in input validation when handling directory traversal sequences.

Recommendations For Mastodon versions 3.5.0 through 3.5.8, update to version 3.5.9 or later. For Mastodon versions 4.0.0 through 4.0.4, update to version 4.0.5 or later. For Mastodon versions 4.1.0 through 4.1.2, update to version 4.1.3 or later. As a temporary workaround, consider restricting access to the media processing code until a patch is applied. Avoid using the media file handler component until the issue is resolved.

Exploit

Correção

RCE

DoS

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BDU:2024-01776

BIT-MASTODON-2023-36460

CVE-2023-36460

GHSA-9928-3CP5-93FM

Produtos afetados

Mastodon

Referências · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36460.json · Exploit
• https://github.com/mastodon/mastodon/security/advisories/GHSA-9928-3cp5-93fm · Nota
• https://github.com/mastodon/mastodon/commit/dc8f1fbd976ae544720a4e07120d9a91b2722440 · Correção
• https://github.com/mastodon/mastodon/releases/tag/v4.0.5 · Nota
• https://github.com/mastodon/mastodon/releases/tag/v3.5.9 · Nota
• https://github.com/mastodon/mastodon/releases/tag/v4.1.3 · Nota
• https://t.me/true_secator/4597 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-36460 · Nota de Segurança
• https://openwall.com/lists/oss-security/2023/07/06/4 · Nota
• https://t.me/purple_medved/70 · Publicação no Telegram
• https://t.me/echeloneyes/1725 · Publicação no Telegram
• https://vuldb.com/?id.233261 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36460 · Nota
• https://t.me/cvenotify/53824 · Publicação no Telegram
• http://openwall.com/lists/oss-security/2023/07/06/4 · Nota