PT-2020-13861 · Codiad · Codiad

Yaniv-Git · Published 2020-08-24 · Updated 2022-12-06 · CVE-2020-14043

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Codiad versions 1.7.8 and later

Description A Cross Side Request Forgery (CSRF) vulnerability was found in the request to download a plugin from the marketplace, which is only available to admin users. The issue lies in the components/market/controller.php file, where the request is not CSRF protected. This might cause admins to make a vulnerable request without their knowledge, potentially resulting in remote code execution. The vendor has stated that Codiad is no longer under active maintenance by core contributors.

Recommendations For Codiad versions 1.7.8 and later, consider disabling the plugin download feature from the marketplace until a patch is available, as a temporary workaround to minimize the risk of exploitation. Restrict access to the components/market/controller.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2020-14043

GHSA-35GP-JXW8-XW6H

Affected Products

Codiad

References · 10

• 🔥 https://advisory.checkmarx.net/advisory/CX-2020-4279 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-14043 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14043 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-35gp-jxw8-xw6h · Vendor Advisory
• https://github.com/Codiad/Codiad/issues/1132 · Note
• https://github.com/Codiad/Codiad · Note
• https://github.com/Codiad/Codiad/blob/master/README.md · Note
• https://github.com/Codiad/Codiad/issues/1122 · Note
• https://web.archive.org/web/20220828222205/https://advisory.checkmarx.net/advisory/CX-2020-4279 · Note
• https://t.me/cvenotify/12349 · Telegram Post