PT-2022-20539 · Unknown · Opensearch-Ruby

Cehenkle · Published 2022-06-30 · Updated 2022-07-25 · CVE-2022-31115

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions opensearch-ruby versions prior to 2.0.1

Description The issue is related to the use of the ruby YAML.load function instead of YAML.safe load in opensearch-ruby, which can lead to unsafe deserialization using YAML.load if the response is of type YAML. An attacker must be in control of an opensearch server and convince the victim to connect to it in order to exploit this vulnerability.

Recommendations For versions prior to 2.0.1, upgrade to version 2.0.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of YAML responses until the issue is resolved. Restrict access to opensearch servers to minimize the risk of exploitation.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2022-31115

GHSA-977C-63XQ-CGW3

Affected Products

Opensearch-Ruby

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31115.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/opensearch-ruby/CVE-2022-31115.yml · Exploit
• 🔥 https://staaldraad.github.io/post/2021-01-09-universal-rce-ruby-yaml-load-updated · Exploit
• https://github.com/opensearch-project/opensearch-ruby/pull/77 · Patch
• https://osv.dev/vulnerability/CVE-2022-31115 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31115 · Security Note
• https://osv.dev/vulnerability/GHSA-977c-63xq-cgw3 · Vendor Advisory
• https://github.com/opensearch-project/opensearch-ruby/security/advisories/GHSA-977c-63xq-cgw3 · Note
• https://github.com/opensearch-project/opensearch-ruby/commit/d74a98b45c037671e8819fa87f6a6423458ab08a · Note
• https://github.com/opensearch-project/opensearch-ruby/compare/v2.0.1...v2.0.2 · Note
• https://github.com/opensearch-project/opensearch-ruby · Note
• https://t.me/cibsecurity/45460 · Telegram Post
• https://t.me/cvenotify/33718 · Telegram Post