PT-2024-30660 · Unknown · Request Store

G-Rath · Published 2024-08-23 · Updated 2024-09-12 · CVE-2024-43791

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions request store version 1.3.2

Description The files published as part of request store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not allow access for local users, so the chances of this being exploited are very low, given that the vast majority of users will have upgraded, and those that have not, if any, are not likely to be exposed.

Recommendations To resolve the issue, simply upgrading to a newer version should fix the problem, as there is no other version of the gem with incorrect permissions. Alternatively, you could chmod the files yourself as a temporary workaround. Upgrading to version 1.4.0 is specifically recommended to mitigate risks.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2024-43791

GHSA-FRP2-5QFC-7R8M

Affected Products

Request Store

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43791.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/request_store/CVE-2024-43791.yml · Exploit
• https://ubuntu.com/security/CVE-2024-43791 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43791 · Security Note
• https://osv.dev/vulnerability/CVE-2024-43791 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-43791 · Security Note
• https://osv.dev/vulnerability/GHSA-frp2-5qfc-7r8m · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-43791 · Vendor Advisory
• https://github.com/steveklabnik/request_store/security/advisories/GHSA-frp2-5qfc-7r8m · Note
• https://github.com/steveklabnik/request_store · Note
• https://t.me/cvedetector/3996 · Telegram Post
• https://twitter.com/transilienceai/status/1828375393734111489 · Twitter Post
• https://twitter.com/CVEnew/status/1826995679303962699 · Twitter Post
• https://t.me/cvenotify/94405 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1827027943949795653 · Twitter Post