PT-2024-31561 · Mariadb+1 · Mariadb+1

Genygo · Published 2024-09-02 · Updated 2024-09-03 · CVE-2024-45308

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions HedgeDoc versions prior to 1.10.0

Description HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc with MySQL or MariaDB, it is possible to create notes with an alias matching the ID of existing notes, effectively hiding the original note. The issue can be exploited by logged-in users or all users, depending on the permission settings, and requires knowledge of the target note's ID. Attackers can use this issue to present a manipulated copy of the original note or prevent access to it, causing a denial of service. No data is lost, as the original content remains in the database.

Recommendations To resolve the issue, upgrade to version 1.10.0. If unable to upgrade, disable freeURL mode to prevent exploitation. Alternatively, restrict freeURL note creation to trusted, logged-in users by enabling requireFreeURLAuthentication/CMD REQUIRE FREEURL AUTHENTICATION.

Exploit

Fix

Weakness Enumeration

CWE-1289

Related Identifiers

CVE-2024-45308

GHSA-PJF2-269H-CX7P

Affected Products

Mariadb

Mysql Server

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45308.json · Exploit
• https://github.com/hedgedoc/hedgedoc/commit/380587b7fd65bc1eb71eef51a3aab324f9877650 · Patch
• https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-pjf2-269h-cx7p · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45308 · Security Note
• https://osv.dev/vulnerability/CVE-2024-45308 · Vendor Advisory
• https://twitter.com/CVEnew/status/1830650425084989623 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1830709204069314623 · Twitter Post
• https://t.me/cvedetector/4644 · Telegram Post
• https://t.me/cvenotify/93007 · Telegram Post