PT-2024-27954 · Codimd+1 · Codimd+1

Denandz · Published 2024-07-10 · Updated 2024-07-11 · CVE-2024-38353

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CodiMD versions prior to 2.5.4

Description CodiMD is missing authentication and access control, allowing an unauthenticated attacker to gain unauthorized access to image data uploaded to CodiMD. The issue arises because CodiMD does not require valid authentication to access uploaded images or to upload new image data. An attacker who can determine an uploaded image's URL can gain unauthorized access to uploaded image data. The insecure random filename generation in the underlying Formidable library increases the likelihood of this issue being exploited, as it allows an attacker to determine the filenames for previously uploaded images.

Recommendations For versions prior to 2.5.4, update to version 2.5.4 to resolve the issue. As a temporary workaround, consider restricting access to the image upload feature to minimize the risk of exploitation. Avoid using the vulnerable image upload functionality until the issue is resolved.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

CWE-338

Related Identifiers

CVE-2024-38353

GHSA-2764-JPPC-P2HM

Affected Products

Codimd

Formidable

References · 7

• 🔥 https://github.com/hackmdio/codimd/security/advisories/GHSA-2764-jppc-p2hm · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38353.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-38353 · Security Note
• https://osv.dev/vulnerability/CVE-2024-38353 · Vendor Advisory
• https://t.me/cvedetector/584 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1811171400444432769 · Twitter Post
• https://twitter.com/CVEnew/status/1811322698460721608 · Twitter Post