PT-2025-6098 · Perfood · Couch-Auth

William Tantiono · Published 2025-02-10 · Updated 2025-02-12 · CVE-2024-57177

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions perfood/couch-auth versions <= 0.21.2

Description A host header injection vulnerability exists in the NPM package of perfood/couch-auth. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a Server-Side Template Injection (SSTI) which can be leveraged to run limited commands or leak server-side information.

Recommendations For perfood/couch-auth versions <= 0.21.2, consider disabling the email change confirmation feature until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the host header in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

Weakness Enumeration

CWE-1336

CWE-74

Related Identifiers

CVE-2024-57177

GHSA-R385-C5FC-X56C

Affected Products

Couch-Auth

References · 8

• 🔥 https://github.com/waristea/cve-research/tree/main/CVE-2024-57177 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-57177 · Security Note
• https://osv.dev/vulnerability/CVE-2024-57177 · Vendor Advisory
• https://github.com/perfood/couch-auth · Note
• https://twitter.com/VulmonFeeds/status/1889148344544493870 · Twitter Post
• https://twitter.com/cybercronai/status/1889740120300847597 · Twitter Post
• https://t.me/cvedetector/17607 · Telegram Post
• https://twitter.com/CVEnew/status/1889032560149213436 · Twitter Post