PT-2024-34165 · Frappe · Press

Xposenilesh · Published 2024-10-31 · Updated 2024-11-01 · CVE-2024-50356

Positive Technologies (AI Summary)

CVSS v3.1

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Press versions prior to the version containing commit ba0007c28ac814260f836849bc07d29beea7deb6

Description: The issue concerns a password reset vulnerability in Press, a custom app for Frappe Cloud that manages various services including infrastructure, subscription, and software-as-a-service (SaaS). This vulnerability allows anyone with access to a user's mail inbox to reset the password, effectively circumventing two-factor authentication (2FA). However, it's noted that even if the password is reset, the attacker would still be unable to log in if 2FA is enabled. Only users who have 2FA enabled are affected by this issue.

Recommendations: For versions prior to the one containing commit ba0007c28ac814260f836849bc07d29beea7deb6, update to a version that includes this commit to resolve the issue. As a temporary workaround, consider restricting access to email inboxes associated with accounts that have 2FA enabled to minimize the risk of password reset exploitation.

Exploit

Fix

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2024-50356

GHSA-G7MF-RM73-R7G9

Affected Products

Press

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50356.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-50356 · Security Note
• https://osv.dev/vulnerability/CVE-2024-50356 · Vendor Advisory
• https://github.com/frappe/press/commit/ba0007c28ac814260f836849bc07d29beea7deb6 · Note
• https://github.com/frappe/press/security/advisories/GHSA-g7mf-rm73-r7g9 · Note
• https://twitter.com/CVEnew/status/1852053321797816636 · Twitter Post
• https://t.me/cvedetector/9518 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1852121867684921812 · Twitter Post