PT-2024-25686 · Kurwov · Kurwov

Superchupudev

·

Published

2024-05-03

·

Updated

2024-05-06

·

CVE-2024-34075

CVSS v3.1

6.2

Medium

VectorAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions kurwov versions prior to 3.2.5
Description The issue arises from an unsafe sanitization of dataset contents on the MarkovData#getNext method used in Markov#generate and Markov#choose. This allows a maliciously crafted string on the dataset to throw and stop the function from running properly. If a string contains a forbidden substring (i.e. proto) followed by a space character, the code will access a special property in MarkovData#finalData by removing the last character of the string, bypassing the dataset sanitization. Any dataset can be contaminated with the substring, making it unable to properly generate anything in some cases.
Recommendations For kurwov versions prior to 3.2.5, upgrade to version 3.2.5 to address the issue. As a temporary workaround, consider avoiding the use of the MarkovData#getNext method or restricting access to contaminated datasets until the upgrade is applied. Additionally, refrain from using the proto substring in dataset strings to minimize the risk of exploitation.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-34075
GHSA-HFRV-H3Q8-9JPR

Affected Products

Kurwov