PT-2024-20764 · Mss · Mss

Zuhairorzaki · Published 2024-02-15 · Updated 2025-01-09 · CVE-2024-25123

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MSS (Mission Support System) versions prior to 8.3.3

Description MSS is an open source package designed for planning atmospheric research flights. The issue concerns a method in the index.py file that is vulnerable to path manipulation attacks. An attacker can modify file paths to acquire sensitive information from different resources by assigning a value containing ../ to the filename variable. This allows the attacker to manipulate the file being read and potentially gain access to other files on the host filesystem.

Recommendations For MSS versions prior to 8.3.3, upgrade to version 8.3.3 to address the issue. As a temporary workaround, consider restricting access to the filename variable to prevent path manipulation attacks. Additionally, restrict access to sensitive files and resources to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-25123

GHSA-PF2H-QJCR-QVQ2

Affected Products

Mss

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25123.json · Exploit
• https://github.com/Open-MSS/MSS/commit/f23033729ee930b97f8bdbd07df0174311c9b658 · Patch
• https://github.com/Open-MSS/MSS/security/advisories/GHSA-pf2h-qjcr-qvq2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-25123 · Security Note
• https://osv.dev/vulnerability/CVE-2024-25123 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1758274164647964842 · Twitter Post
• https://twitter.com/CVEnew/status/1758244315875160206 · Twitter Post
• https://t.me/cvenotify/71678 · Telegram Post
• https://twitter.com/cracbot/status/1758370731971522954 · Twitter Post