PT-2022-16936 · Databasir · Databasir

Luckyt0Mat0 · Published 2022-04-20 · Updated 2022-05-03 · CVE-2022-24862

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Databasir version 1.01

Description Databasir is a team-oriented relational database model document management platform. It has a Server-Side Request Forgery issue. During the download verification process of a JDBC driver, the corresponding JDBC driver download address will be downloaded first, but this address will return a response page with complete error information when accessing a non-existent URL. Attackers can take advantage of this feature for SSRF.

Recommendations For Databasir version 1.01, as a temporary workaround, consider restricting the download verification process of JDBC drivers to minimize the risk of exploitation. Avoid using the feature that downloads the JDBC driver download address until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2022-24862

GHSA-R8M9-R74J-VC6M

Affected Products

Databasir

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24862.json · Exploit
• 🔥 https://github.com/vran-dev/databasir/security/advisories/GHSA-r8m9-r74j-vc6m · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-24862 · Security Note
• https://osv.dev/vulnerability/CVE-2022-24862 · Vendor Advisory
• https://github.com/vran-dev/databasir/releases/tag/v1.0.2 · Note
• https://t.me/cvenotify/29637 · Telegram Post
• https://t.me/cibsecurity/41197 · Telegram Post