PT-2022-17027 · Unknown · Kitodo.Presentation

Alexander Bigga + 1 · Published 2022-02-19 · Updated 2022-03-04 · CVE-2022-24980

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kitodo.Presentation extension versions prior to 2.3.2 Kitodo.Presentation extension versions 3.x prior to 3.2.3 Kitodo.Presentation extension versions 3.3.x prior to 3.3.4

Description A missing access check in an eID script allows an unauthenticated user to submit arbitrary URLs to this component, resulting in Server-Side Request Forgery (SSRF). This enables attackers to view the content of any file or webpage the webserver has access to.

Recommendations For Kitodo.Presentation extension versions prior to 2.3.2, update to version 2.3.2 or later. For Kitodo.Presentation extension versions 3.x prior to 3.2.3, update to version 3.2.3 or later. For Kitodo.Presentation extension versions 3.3.x prior to 3.3.4, update to version 3.3.4 or later. As a temporary workaround, consider restricting access to the eID script to prevent unauthenticated users from submitting arbitrary URLs.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2022-24980

GHSA-X832-R2RJ-4G5P

Affected Products

Kitodo.Presentation

References · 11

• https://typo3.org/help/security-advisories · Vendor Advisory
• https://typo3.org/security/advisory/typo3-ext-sa-2022-001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24980 · Security Note
• https://osv.dev/vulnerability/GHSA-x832-r2rj-4g5p · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24980 · Vendor Advisory
• https://github.com/kitodo/kitodo-presentation/commit/9700478b46445f562c3e2051d61565d779f59275 · Note
• https://github.com/kitodo/kitodo-presentation/commit/4a20621afc30778ba3b045be5110353cf4fd4fd4 · Note
• https://github.com/kitodo/kitodo-presentation/commit/059be3f82b08c60cbb798986cd3ff22dbf60a5e4 · Note
• https://t.me/cvenotify/27757 · Telegram Post
• https://t.me/cibsecurity/37815 · Telegram Post
• https://security.snyk.io/vuln/SNYK-PHP-KITODOPRESENTATION-2407280 · Note