Lucene search

SnykCVE-2024-21583

HistoryJul 19, 2024 - 5:15 a.m.

CVE-2024-21583

2024-07-1905:15:10

CWE-15

snyk

web.nvd.nist.gov

package vulnerability

cookie tossing

subdomain control

gitpod control plane

jwt session

CVSS3

4.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

Percentile

13.4%

JSON

Versions of the package github.com/gitpod-io/gitpod/components/server/go/pkg/lib before main-gha.27122; versions of the package github.com/gitpod-io/gitpod/components/ws-proxy/pkg/proxy before main-gha.27122; versions of the package github.com/gitpod-io/gitpod/install/installer/pkg/components/auth before main-gha.27122; versions of the package github.com/gitpod-io/gitpod/install/installer/pkg/components/public-api-server before main-gha.27122; versions of the package github.com/gitpod-io/gitpod/install/installer/pkg/components/server before main-gha.27122; versions of the package @gitpod/gitpod-protocol before 0.1.5-main-gha.27122 are vulnerable to Cookie Tossing due to a missing __Host- prefix on the gitpod_io_jwt2 session cookie. This allows an adversary who controls a subdomain to set the value of the cookie on the Gitpod control plane, which can be assigned to an attacker’s own JWT so that specific actions taken by the victim (such as connecting a new Github organization) are actioned by the attackers session.

CNA Affected

[
  {
    "product": "github.com/gitpod-io/gitpod/components/server/go/pkg/lib",
    "versions": [
      {
        "version": "0",
        "lessThan": "main-gha.27122",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  },
  {
    "product": "github.com/gitpod-io/gitpod/components/ws-proxy/pkg/proxy",
    "versions": [
      {
        "version": "0",
        "lessThan": "main-gha.27122",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  },
  {
    "product": "github.com/gitpod-io/gitpod/install/installer/pkg/components/auth",
    "versions": [
      {
        "version": "0",
        "lessThan": "main-gha.27122",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  },
  {
    "product": "github.com/gitpod-io/gitpod/install/installer/pkg/components/public-api-server",
    "versions": [
      {
        "version": "0",
        "lessThan": "main-gha.27122",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  },
  {
    "product": "github.com/gitpod-io/gitpod/install/installer/pkg/components/server",
    "versions": [
      {
        "version": "0",
        "lessThan": "main-gha.27122",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  },
  {
    "product": "@gitpod/gitpod-protocol",
    "versions": [
      {
        "version": "0",
        "lessThan": "0.1.5-main-gha.27122",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  }
]

References

app.safebase.io/portal/71ccd717-aa2d-4a1e-942e-c768d37e9e0c/preview?product=%5B%E2%80%A6%5D942e-c768d37e9e0c&tcuUid=1d505bda-9a38-4ca5-8724-052e6337f34d

github.com/gitpod-io/gitpod/commit/da1053e1013f27a56e6d3533aa251dbd241d0155

github.com/gitpod-io/gitpod/pull/19973

security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGITPODIOGITPODCOMPONENTSSERVERGOPKGLIB-7452074

security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGITPODIOGITPODCOMPONENTSWSPROXYPKGPROXY-7452075

security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGITPODIOGITPODINSTALLINSTALLERPKGCOMPONENTSAUTH-7452076

security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGITPODIOGITPODINSTALLINSTALLERPKGCOMPONENTSPUBLICAPISERVER-7452077

security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGITPODIOGITPODINSTALLINSTALLERPKGCOMPONENTSSERVER-7452078

security.snyk.io/vuln/SNYK-JS-GITPODGITPODPROTOCOL-7452079

CVSS3

4.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

Percentile

13.4%

JSON

Related for CVE-2024-21583