PT-2023-25178 · Remult · Remult

Chrisrimmer · Published 2023-06-20 · Updated 2023-07-05 · CVE-2023-35167

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Remult versions prior to 0.20.6

Description The issue allows an attacker who knows the id of an entity instance they are not authorized to access to gain read, update, and delete access to it. This occurs when the apiPrefilter option of the @Entity decorator is set to a function that returns a filter intended to prevent unauthorized access to data.

Recommendations For versions prior to 0.20.6, set the apiPrefilter option to a filter object instead of a function as a workaround. Update to version 0.20.6 to fix the issue.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2023-35167

GHSA-7HH3-3X64-V2G9

Affected Products

Remult

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/35xxx/CVE-2023-35167.json · Exploit
• https://github.com/remult/remult/commit/6892ae97134126d8710ef7302bb2fc37730994c5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-35167 · Security Note
• https://osv.dev/vulnerability/GHSA-7hh3-3x64-v2g9 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-35167 · Vendor Advisory
• https://github.com/remult/remult/releases/tag/v0.20.6 · Note
• https://github.com/remult/remult · Note
• https://github.com/remult/remult/security/advisories/GHSA-7hh3-3x64-v2g9 · Note
• https://t.me/cvenotify/53013 · Telegram Post