CVE-2023-50263

🗓️ 12 Dec 2023 22:17:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 44 Views🌐 WEB

Nautobot 1.x and 2.0.x prior to 1.6.7 and 2.0.6 allow unauthenticated access to files via specially-crafted URL

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2023-50263	4 Jan 202409:41	–	circl
CNNVD	Nautobot Security Vulnerability	12 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-50263 Nautobot allows unauthenticated db-file-storage views	12 Dec 202322:17	–	cvelist
EUVD	EUVD-2023-0180	3 Oct 202520:07	–	euvd
Github Security Blog	Unauthenticated db-file-storage views	13 Dec 202313:35	–	github
NVD	CVE-2023-50263	12 Dec 202323:15	–	nvd
OSV	CVE-2023-50263 Nautobot allows unauthenticated db-file-storage views	12 Dec 202322:17	–	osv
OSV	GHSA-75MC-3PJC-727Q Unauthenticated db-file-storage views	13 Dec 202313:35	–	osv
OSV	PYSEC-2023-286	12 Dec 202323:15	–	osv
Prion	Design/Logic Flaw	12 Dec 202323:15	–	prion

NVD

Vulners

Node

networktocode nautobotRange1.1.0–1.6.7

networktocode nautobotRange2.0.0–2.0.6

[
  {
    "vendor": "nautobot",
    "product": "nautobot",
    "versions": [
      {
        "version": ">= 1.1.0, < 1.6.7",
        "status": "affected"
      },
      {
        "version": ">= 2.0.0, < 2.0.6",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/nautobot/nautobot/commit/7c4cf3137f45f1541f09f2f6a7f8850cd3a2eaee
github	www.github.com/nautobot/nautobot/pull/4959
github	www.github.com/nautobot/nautobot/pull/4964
github	www.github.com/nautobot/nautobot/commit/458280c359a4833a20da294eaf4b8d55edc91cee
github	www.github.com/victor-o-silva/db_file_storage/blob/master/db_file_storage/views.py
github	www.github.com/nautobot/nautobot/security/advisories/GHSA-75mc-3pjc-727q

Parameter	Position	Path	Description	CWE
name	query param	/files/get/?name=...	Unauthenticated access to file resources via the get endpoint (/files/get/) that exposes uploaded files without requiring authentication.	CWE-200, CWE-306
name	query param	/files/download/?name=...	Unauthenticated access to file resources via the download endpoint (/files/download/) that exposes uploaded files without requiring authentication.	CWE-200, CWE-306

21 Nov 2024 08:36Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.13.7 - 5.3

EPSS0.00449