PT-2023-11828 · Unknown · Paxswill Eve Ship Replacement Program

Published 2023-02-06 · Updated 2024-05-17 · CVE-2020-36660

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions paxswill EVE Ship Replacement Program version 0.12.11

Description A vulnerability was found in the paxswill EVE Ship Replacement Program, affecting the User Information Handler component. This issue leads to information disclosure and can be initiated remotely. The vulnerability affects some unknown processing of the file src/evesrp/views/api.py.

Recommendations To address this issue, upgrade to version 0.12.12.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2020-36660

GHSA-FXQX-XGQQ-GF42

PYSEC-2023-208

Affected Products

Paxswill Eve Ship Replacement Program

References · 12

• https://github.com/paxswill/evesrp/commit/9e03f68e46e85ca9c9694a6971859b3ee66f0240 · Patch
• https://github.com/paxswill/evesrp/releases/tag/v0.12.12 · Patch
• https://osv.dev/vulnerability/GHSA-fxqx-xgqq-gf42 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36660 · Security Note
• https://osv.dev/vulnerability/PYSEC-2023-208 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-36660 · Vendor Advisory
• https://github.com/pypa/advisory-database/tree/main/vulns/eve-srp/PYSEC-2023-208.yaml · Note
• https://github.com/paxswill/evesrp · Note
• https://t.me/cvenotify/43694 · Telegram Post
• https://vuldb.com/?id.220211 · Note
• https://vuldb.com/?ctiid.220211 · Note
• https://t.me/cibsecurity/57569 · Telegram Post