PT-2025-4837 · Ambari · Ambari

Viraj Jasani · Publicado 2025-01-21 · Atualizado 2025-01-22 · CVE-2025-23195

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ambari versions prior to 2.7.9

Description An XML External Entity (XXE) issue exists, allowing an attacker to inject malicious XML entities due to insecure parsing of XML input using the DocumentBuilderFactory class without disabling external entity resolution. This can be exploited to read arbitrary files on the server or perform server-side request forgery (SSRF) attacks.

Recommendations For Ambari versions prior to 2.7.9, update to Ambari 2.7.9 or later to resolve the issue. As a temporary workaround, consider disabling the use of the DocumentBuilderFactory class or restrict its functionality to minimize the risk of exploitation.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2025-23195

Produtos afetados

Ambari

Referências · 8

• https://t.me/cvedetector/16031 · Publicação no Telegram
• https://t.me/cvenotify/108219 · Publicação no Telegram
• https://lists.apache.org/thread/hsb6mvxd7g37dq1ygtd0pd88gs9tfcwq · Aviso do Fabricante
• https://t.me/cvenotify/108169 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-23195 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-23195 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2025/01/21/7 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1881821711638864045 · Publicação no Twitter