PT-2022-20605 · Databasir · Databasir

Stefanberg96 + 1 · Published 2022-09-02 · Updated 2022-09-08 · CVE-2022-31196

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions Databasir versions 1.06 and earlier

Description The issue allows attackers to perform Server-Side Request Forgery (SSRF) by sending a single HTTP POST request to create a databaseType. This is achieved by supplying a jdbcDriverFileUrl that returns a non 200 response code. As a result, the URL is executed, and the response is logged, potentially allowing attackers to obtain the real IP address and scan Intranet information.

Recommendations For Databasir versions 1.06 and earlier, update to version 1.0.7 to resolve the issue.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2022-31196

GHSA-QVG8-427F-852Q

Affected Products

Databasir

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31196.json · Exploit
• 🔥 https://github.com/vran-dev/databasir/security/advisories/GHSA-qvg8-427f-852q · Exploit
• https://github.com/vran-dev/databasir/commit/226c20e0c9124037671a91d6b3e5083bd2462058 · Patch
• https://osv.dev/vulnerability/CVE-2022-31196 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31196 · Security Note
• https://github.com/vran-dev/databasir/releases/tag/v1.0.7 · Note