PT-2023-30247 · Unknown · Peppermint Ticket Management

Published 2023-10-29 · Updated 2023-11-08 · CVE-2023-46863

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Peppermint Ticket Management versions prior to 0.2.4

Description The issue allows remote attackers to read arbitrary files via a "/api/v1/users/file/download?filepath=./../" POST request. This is a significant security concern as it potentially exposes sensitive data.

Recommendations For versions prior to 0.2.4, update to version 0.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/api/v1/users/file/download" API endpoint until the update is applied. Avoid using the filepath variable in the affected API endpoint with relative paths that can be manipulated to access files outside the intended directory.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-46863

Affected Products

Peppermint Ticket Management

References · 5

• 🔥 https://github.com/Peppermint-Lab/peppermint/issues/108 · Exploit
• https://osv.dev/vulnerability/CVE-2023-46863 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46863 · Security Note
• https://t.me/cvenotify/60169 · Telegram Post
• https://t.me/latest_high_impact_cve/75 · Telegram Post