PT-2024-34647 · Unknown · Changedetection.Io

Chasebowman-Contrast · Published 2024-11-01 · Updated 2024-11-02 · CVE-2024-51483

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions changedetection.io versions prior to 0.47.5

Description The issue allows retrieval of local system files when a WebDriver is used to fetch files, by utilizing source:file:///etc/passwd, which bypasses the block on traditional file:///etc/passwd requests. This is due to the payload passing certain regex and checks within the software. The impact of this issue depends on the deployment location of the webdriver but is generally considered high.

Recommendations For versions prior to 0.47.5, update to version 0.47.5 to resolve the issue. As a temporary workaround, consider restricting the use of the WebDriver to fetch files until the update is applied.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-51483

GHSA-CWGG-57XJ-G77R

Affected Products

Changedetection.Io

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/51xxx/CVE-2024-51483.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-51483 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51483 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cwgg-57xj-g77r · Vendor Advisory
• https://github.com/dgtlmoon/changedetection.io · Note
• https://github.com/dgtlmoon/changedetection.io/blob/master/changedetectionio/model/Watch.py#L19 · Note
• https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-cwgg-57xj-g77r · Note
• https://github.com/dgtlmoon/changedetection.io/blob/master/changedetectionio/processors/__init__.py#L35 · Note
• https://github.com/user-attachments/files/17591630/CL-ChangeDetection.io.Path.Travsersal-311024-181039.pdf · Note
• https://twitter.com/VulmonFeeds/status/1852536729443471814 · Twitter Post
• https://t.me/cvedetector/9615 · Telegram Post
• https://twitter.com/CVEnew/status/1852393600795267427 · Twitter Post