PT-2024-35696 · Unknown+3 · Mysql Server+3

Quinox · Published 2024-12-03 · Updated 2024-12-18 · CVE-2024-53257

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Vitess versions prior to 19.0.8 Vitess versions prior to 20.0.4 Vitess versions prior to 21.0.1

Description Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input, allowing queries executed by Vitess to write HTML into the monitoring page at will. These pages are rendered using text/template instead of a proper HTML templating engine. Anyone looking at the Vitess status page is affected, typically owners or administrators of the Vitess cluster. Anyone who can influence the text that shows up in queries can trigger this issue.

Recommendations For Vitess versions prior to 19.0.8, update to version 19.0.8 or later. For Vitess versions prior to 20.0.4, update to version 20.0.4 or later. For Vitess versions prior to 21.0.1, update to version 21.0.1 or later. As a temporary workaround, consider restricting access to the /debug/querylogz and /debug/env pages for vtgate and vttablet until the issue is resolved. Avoid using queries that include HTML markup until the issue is fixed.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

AZL-53970

AZL-53977

CVE-2024-53257

GHSA-7MWH-Q3XM-QH6P

GO-2024-3306

OPENSUSE-SU-2024:14599-1

Affected Products

Mysql Server

Vitess

Vtgate

Vttablet

References · 35

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53257.json · Exploit
• https://osv.dev/vulnerability/CVE-2024-53257 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2024-3306 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7mwh-q3xm-qh6p · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14599-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-53977 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53257 · Security Note
• https://osv.dev/vulnerability/AZL-53970 · Vendor Advisory
• https://github.com/vitessio/vitess · Note
• https://github.com/vitessio/vitess/security/advisories/GHSA-7mwh-q3xm-qh6p · Note
• https://github.com/vitessio/vitess/commit/2b71d1b5f8ca676beeab2875525003cd45096217 · Note
• https://suse.com/security/cve/CVE-2024-55658 · Note
• https://suse.com/security/cve/CVE-2024-44337 · Note
• https://suse.com/security/cve/CVE-2023-26248 · Note
• https://suse.com/security/cve/CVE-2022-31668 · Note