PT-2024-29567 · Craft Cms · Craft Cms

Fabiantuw · Published 2024-07-25 · Updated 2024-08-26 · CVE-2024-41800

Positive Technologies (AI Summary)

CVSS v4.0

6.0

Medium

Base vector

AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Craft CMS versions prior to 5.2.3

Description Craft CMS 5 allows reuse of TOTP tokens multiple times within the validity period. An attacker is able to re-submit a valid TOTP token to establish an authenticated session. This requires that the attacker has knowledge of the victim's credentials. The validity period of a TOTP token is 2 minutes, making a successful brute force attack more likely.

Recommendations For Craft CMS versions prior to 5.2.3, update to version 5.2.3 to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the CMS to minimize the risk of exploitation. Avoid reusing TOTP tokens within the validity period until the issue is resolved.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2024-41800

GHSA-WMX7-PW49-88JX

Affected Products

Craft Cms

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41800.json · Exploit
• https://github.com/craftcms/cms/security/advisories/GHSA-wmx7-pw49-88jx · Vendor Advisory
• https://github.com/craftcms/cms/commit/7c790fa5ad5a8cb8016cb6793ec3554c4c079e38 · Patch
• https://osv.dev/vulnerability/CVE-2024-41800 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41800 · Security Note
• https://osv.dev/vulnerability/GHSA-wmx7-pw49-88jx · Vendor Advisory
• https://github.com/craftcms/cms · Note
• https://github.com/craftcms/cms/releases/tag/5.2.3 · Note
• https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20240617-01_CraftCMS_TOTP_Valid_After_Use · Note
• https://t.me/cvenotify/87537 · Telegram Post
• https://t.me/cvedetector/1635 · Telegram Post