PT-2024-30668 · Unknown+1 · Statics-Server+1

Adamkorcz · Published 2024-09-10 · Updated 2024-09-20 · CVE-2024-43800

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions serve-static versions prior to 1.16.0

Description The issue allows execution of untrusted code by passing untrusted user input to the redirect() function, even after sanitizing it. This can be exploited if an attacker controls the input to response.redirect(), express does not redirect before the template appears, and the browser does not complete redirection before the user clicks on the link in the template.

Recommendations For versions prior to 1.16.0, upgrade to serve-static 1.16.0 to patch the issue. As a temporary workaround, ensure any untrusted inputs are safe by validating them against an explicit allowlist.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

AZL-49094

AZL-49147

AZL-49155

CVE-2024-43800

GHSA-CM22-4G7W-348P

Affected Products

Debian

Statics-Server

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43800.json · Exploit
• https://github.com/expressjs/serve-static/commit/ce730896fddce1588111d9ef6fdf20896de5c6fa · Patch
• https://github.com/expressjs/serve-static/commit/0c11fad159898cdc69fd9ab63269b72468ecaf6b · Patch
• https://github.com/expressjs/serve-static/security/advisories/GHSA-cm22-4g7w-348p · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-43800 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cm22-4g7w-348p · Vendor Advisory
• https://osv.dev/vulnerability/AZL-49155 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43800 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-43800 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-43800 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-49147 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-43800 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-43800 · Security Note
• https://osv.dev/vulnerability/AZL-49094 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43800 · Vendor Advisory