PT-2023-20436 · Gentoo · Soko

Arthur Zamarin · Published 2023-02-24 · Updated 2023-03-06 · CVE-2023-26033

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Gentoo soko versions prior to 1.0.1

Description The issue allows for SQL Injection, leading to a Denial of Service. When the "Recently Visited Packages" view is selected, the search history cookie value is used in SQL queries without proper sanitization, allowing users to inject SQL queries by modifying the cookie value. This can result in database modification or wiping. Since only public data is stored, there are no confidentiality issues for site users. If the database is modified, it can be restored by wiping and updating all components.

Recommendations For versions prior to 1.0.1, update to version 1.0.1 to resolve the issue. As a temporary workaround, consider using a proxy to always drop the search history cookie until upgraded. Alternatively, sanitize the value of the search history cookie after base64 decoding it until a patch can be applied.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-26033

GHSA-GP8G-JFQ9-5Q2G

Affected Products

Soko

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/26xxx/CVE-2023-26033.json · Exploit
• https://github.com/gentoo/soko/security/advisories/GHSA-gp8g-jfq9-5q2g · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-26033 · Security Note
• https://osv.dev/vulnerability/CVE-2023-26033 · Vendor Advisory
• https://gitweb.gentoo.org/sites/soko.git/commit/?id=5ae9ca83b735804f2bd405592983a73d7fcc42f4 · Patch