Lucene search

MitreCVE-2023-31465

HistoryJul 26, 2023 - 8:15 p.m.

CVE-2023-31465

2023-07-2620:15:12

mitre

web.nvd.nist.gov

cve-2023-31465

fsmlabs timekeeper

remote code execution

url modification

security vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.018

Percentile

88.4%

JSON

An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests from various timekeeper streams, it is possible to find the getsamplebacklog call. Some query parameters are passed directly in the URL and named arg[x], with x an integer starting from 1; it is possible to modify arg[2] to insert Bash code that will be executed directly by the server.

Affected configurations

Nvd

Node

fsmlabstimekeeperRange8.0.17–8.0.28

VendorProductVersionCPE
fsmlabstimekeeper*cpe:2.3:a:fsmlabs:timekeeper:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fsmlabs	timekeeper	*	cpe:2.3:a:fsmlabs:timekeeper::::::::

References

fsmlabs.com/fsmlabs-cybersecurity/

github.com/CapgeminiCisRedTeam/Disclosure/blob/main/CVE%20PoC/CVE-2023-31465.md

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.018

Percentile

88.4%

JSON

Related for CVE-2023-31465