PT-2020-16676 · Redcap · Redcap

Published 2020-10-31 · Updated 2021-07-01 · CVE-2020-27358

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions REDCap versions 8.11.6 through 9.x before 10

Description An issue was discovered in the messenger's CSV feature, which allows users to export their conversation threads as CSV. Non-privileged users can export one another's conversation threads by changing the thread id parameter in the request to the endpoint "Messenger/messenger download csv.php?title=Hey&thread id={THREAD ID}".

Recommendations For versions 8.11.6 through 9.x before 10, consider restricting access to the Messenger/messenger download csv.php endpoint to prevent non-privileged users from exporting one another's conversation threads. As a temporary workaround, consider disabling the CSV export feature in the messenger until a patch is available.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2020-27358

Affected Products

Redcap

References · 8

• 🔥 https://github.com/sebastian-mora/cve-2020-27358-27359 · Exploit
• 🔥 https://github.com/seb1055/cve-2020-27358-27359 · Exploit
• 🔥 https://evms.edu/research/resources_services/redcap/redcap_change_log · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-27358 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27358 · Vendor Advisory
• https://t.me/cvenotify/5109 · Telegram Post
• https://ruse.tech/blog/38 · Note
• https://t.me/cvenotify/5713 · Telegram Post