GHSA-vq4h-xrwc-m639
Vulnerability from github
Published
2022-09-16 00:00
Modified
2022-09-16 21:56
Severity
Summary
rdiffweb CSRF vulnerability in profile's SSH keys can lead to unauthorized access
Details
rdiffweb prior to 2.4.3 is vulnerable to Cross-Site Request Forgery (CSRF). While adding SSH public keys to the profile, the server accepts the GET request, which results in adding an SSH public key to the profile and leads to unauthorized access to the system and backups. Version 2.4.3 contains a patch for this issue.
{
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "rdiffweb"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.4.3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2022-3221"
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"github_reviewed": true,
"github_reviewed_at": "2022-09-16T21:56:47Z",
"nvd_published_at": "2022-09-15T09:15:00Z",
"severity": "HIGH"
},
"details": "rdiffweb prior to 2.4.3 is vulnerable to Cross-Site Request Forgery (CSRF). While adding SSH public keys to the profile, the server accepts the GET request, which results in adding an SSH public key to the profile and leads to unauthorized access to the system and backups. Version 2.4.3 contains a patch for this issue.",
"id": "GHSA-vq4h-xrwc-m639",
"modified": "2022-09-16T21:56:47Z",
"published": "2022-09-16T00:00:39Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3221"
},
{
"type": "WEB",
"url": "https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73"
},
{
"type": "PACKAGE",
"url": "https://github.com/ikus060/rdiffweb"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-278.yaml"
},
{
"type": "WEB",
"url": "https://huntr.dev/bounties/1fa1aac9-b16a-4a70-a7da-960b3908ae1d"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "rdiffweb CSRF vulnerability in profile\u0027s SSH keys can lead to unauthorized access"
}
Loading...