PT-2024-5292 · Unknown · Openapi Generator

Stefan-Schiller-Sonarsource · Published 2024-05-27 · Updated 2024-10-22 · CVE-2024-35219

Positive Technologies (AI Summary)

CVSS v2.0

8.7

High

Base vector

AV:N/AC:L/Au:S/C:P/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenAPI Generator versions prior to 7.6.0

Description The issue is related to incorrect restriction of the path name to a directory with limited access. Exploitation of this issue may allow a remote attacker to bypass security restrictions and gain read, modify, or delete access to data using the outputFolder option. This can lead to reading and deleting files and folders from an arbitrary, writable directory.

Recommendations For versions prior to 7.6.0, update to version 7.6.0 or later, which removes the usage of the outputFolder option, thus fixing the issue. As a temporary workaround, consider restricting access to the outputFolder option to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2024-05914

CVE-2024-35219

GHSA-G3HR-P86P-593H

Affected Products

Openapi Generator

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35219.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-35219 · Security Note
• https://bdu.fstec.ru/vul/2024-05914 · Security Note
• https://osv.dev/vulnerability/CVE-2024-35219 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g3hr-p86p-593h · Vendor Advisory
• https://github.com/OpenAPITools/openapi-generator/security/advisories/GHSA-g3hr-p86p-593h · Note
• https://github.com/OpenAPITools/openapi-generator/pull/18652 · Note
• https://github.com/OpenAPITools/openapi-generator/commit/edbb021aadae47dcfe690313ce5119faf77f800d · Note
• https://github.com/OpenAPITools/openapi-generator · Note
• https://twitter.com/Sonar_Research/status/1848741306102591783 · Twitter Post
• https://t.me/cvenotify/81087 · Telegram Post