PT-2024-35160 · Khoj · Khoj

Adventure8812

+1

·

Published

2024-12-30

·

Updated

2024-12-30

·

CVE-2024-52294

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Khoj versions prior to 1.29.10
Description The issue is related to an Insecure Direct Object Reference (IDOR) vulnerability in the update subscription endpoint, allowing any authenticated user to manipulate other users' Stripe subscriptions by modifying the email parameter in the request. The vulnerability exists in the subscription endpoint at "/api/subscription", which uses an email parameter as a direct reference to user subscriptions without verifying object ownership. While authentication is required, there is no authorization check to verify if the authenticated user owns the referenced subscription.
Recommendations For versions prior to 1.29.10, update to version 1.29.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the /api/subscription endpoint to prevent unauthorized subscription modifications. Additionally, avoid using the email parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2024-52294
GHSA-HQ4H-W933-JM6C

Affected Products

Khoj