PT-2023-32816 · Unknown · Dfirkuiper Kuiper

Heck-Gd · Published 2023-12-18 · Updated 2024-05-17 · CVE-2023-6908

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions DFIRKuiper Kuiper version 2.3.4

Description A problematic issue was found in the TAR Archive Handler component, specifically affecting the unzip file function of the case management.py file. The manipulation of the dst path argument leads to path traversal. This issue can be initiated remotely, with a rather high complexity of attack and difficult exploitability.

Recommendations For version 2.3.4, upgrade to version 2.3.5 to address this issue. As a temporary workaround, consider restricting access to the unzip file function or the dst path argument in the case management.py file until the upgrade is applied.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-6908

Affected Products

Dfirkuiper Kuiper

References · 8

• https://github.com/DFIRKuiper/Kuiper/releases/tag/v2.3.5 · Patch
• https://github.com/DFIRKuiper/Kuiper/pull/106 · Patch
• https://github.com/DFIRKuiper/Kuiper/commit/94fa135153002f651f5526c55a7240e083db8d73 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-6908 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6908 · Vendor Advisory
• https://vuldb.com/?ctiid.248277 · Note
• https://t.me/cvenotify/64985 · Telegram Post
• https://vuldb.com/?id.248277 · Note