PT-2024-40029 · Catalyst · Sentry

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

CVSS v3.1

8.9

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions OpenCFP (affected versions not specified)

Description The issue concerns the third-party authentication framework Sentry, developed by Cartalyst, which is used in OpenCFP. It stems from how Sentry handles password reset checks, specifically when users lack a password reset token stored in the database, resulting in NULL in the reset password code column. This could allow unauthorized manipulation of any OpenCFP user's password, particularly those without an unused password reset token. Successful exploitation still requires correlating the numeric user ID with an email address, but identifying likely organizers (typically users with IDs 1-5) may facilitate this process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-2M5G-8XPW-42VP

Affected Products

Sentry

References · 4

• https://osv.dev/vulnerability/GHSA-2m5g-8xpw-42vp · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/cartalyst/sentry/2016-09-05.yaml · Note
• https://github.com/cartalyst/sentry · Note
• https://web.archive.org/web/20180119075946/https://haxx.ml/post/149975211631/how-i-hacked-your-cfp-and-probably-some-other · Note