2024-07-19 14:03:13 +00:00

80 lines
3.5 KiB
JSON

{
"id": "CVE-2024-21527",
"sourceIdentifier": "report@snyk.io",
"published": "2024-07-19T05:15:10.053",
"lastModified": "2024-07-19T13:01:44.567",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Versions of the package github.com/gotenberg/gotenberg/v8/pkg/gotenberg before 8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/chromium before 8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/webhook before 8.1.0 are vulnerable to Server-side Request Forgery (SSRF) via the /convert/html endpoint when a request is made to a file via localhost, such as <iframe src=\"\\\\localhost/etc/passwd\">. By exploiting this vulnerability, an attacker can achieve local file inclusion, allowing of sensitive files read on the host system.\r\r Workaround\rAn alternative is using either or both --chromium-deny-list and --chromium-allow-list flags."
},
{
"lang": "es",
"value": "Versiones del paquete github.com/gotenberg/gotenberg/v8/pkg/gotenberg anteriores a 8.1.0; versiones del paquete github.com/gotenberg/gotenberg/v8/pkg/modules/chromium anteriores a 8.1.0; Las versiones del paquete github.com/gotenberg/gotenberg/v8/pkg/modules/webhook anteriores a 8.1.0 son vulnerables a la Server Side Request Forgery (SSRF) a trav\u00e9s del endpoint /convert/html cuando se realiza una solicitud a un archivo a trav\u00e9s de localhost, como . Al explotar esta vulnerabilidad, un atacante puede lograr la inclusi\u00f3n de archivos locales, permitiendo la lectura de archivos confidenciales en el sistema host. Workaround una alternativa es utilizar uno o ambos indicadores --chromium-deny-list y --chromium-allow-list."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "report@snyk.io",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 4.2
}
]
},
"weaknesses": [
{
"source": "report@snyk.io",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"references": [
{
"url": "https://gist.github.com/filipochnik/bc88a3d1cc17c07cec391ee98e1e6356",
"source": "report@snyk.io"
},
{
"url": "https://github.com/gotenberg/gotenberg/commit/ad152e62e5124b673099a9103eb6e7f933771794",
"source": "report@snyk.io"
},
{
"url": "https://github.com/gotenberg/gotenberg/releases/tag/v8.1.0",
"source": "report@snyk.io"
},
{
"url": "https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGGOTENBERG-7537081",
"source": "report@snyk.io"
},
{
"url": "https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGMODULESCHROMIUM-7537082",
"source": "report@snyk.io"
},
{
"url": "https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGMODULESWEBHOOK-7537083",
"source": "report@snyk.io"
}
]
}