PT-2024-32312 · Openc3 · Openc3 Cosmos

P- · Published 2024-10-02 · Updated 2024-11-18 · CVE-2024-46977

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenC3 COSMOS versions prior to 5.19.0

Description A path traversal vulnerability inside of LocalMode's open local file method allows an authenticated user with adequate permissions to download any .txt via the ScreensController#show on the web server COSMOS is running on, depending on the file permissions. This issue may lead to Information Disclosure.

Recommendations For versions prior to 5.19.0, update to version 5.19.0 to resolve the issue. As a temporary workaround, consider restricting access to the ScreensController#show endpoint or limiting the permissions of authenticated users to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-46977

GHSA-8JXR-MCCC-MWG8

PYSEC-2024-101

Affected Products

Openc3 Cosmos

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46977.json · Exploit
• https://github.com/OpenC3/cosmos/commit/a34e61aea5a465f0ab3e57d833ae7ff4cafd710b · Patch
• https://github.com/OpenC3/cosmos/security/advisories/GHSA-8jxr-mccc-mwg8 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2024-101 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-46977 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46977 · Security Note
• https://osv.dev/vulnerability/GHSA-8jxr-mccc-mwg8 · Vendor Advisory
• https://github.com/pypa/advisory-database/tree/main/vulns/openc3/PYSEC-2024-101.yaml · Note
• https://github.com/OpenC3/cosmos · Note
• https://t.me/cvedetector/6879 · Telegram Post
• https://rubysec.com/advisories/CVE-2024-46977 · Note
• https://twitter.com/CVEnew/status/1841560209585479993 · Twitter Post
• https://securitylab.github.com/advisories/GHSL-2024-127_GHSL-2024-129_OpenC3_COSMOS · Note
• https://twitter.com/GHSecurityLab/status/1847101545516536134 · Twitter Post
• https://twitter.com/SpaceCyberSec/status/1858329484782657909 · Twitter Post