Lucene search

GitHub_MCVELIST:CVE-2023-42450

HistorySep 19, 2023 - 3:53 p.m.

CVE-2023-42450 Mastodon Server-Side Request Forgery vulnerability

2023-09-1915:53:39

CWE-113

CWE-918

GitHub_M

www.cve.org

mastodon

ssrf

vulnerability

activitypub

http

request

exploit

patch

version 4.2.0-rc2

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

49.1%

JSON

Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 4.2.0-beta1 and prior to version 4.2.0-rc2, by crafting specific input, attackers can inject arbitrary data into HTTP requests issued by Mastodon. This can be used to perform confused deputy attacks if the server configuration includes ALLOWED_PRIVATE_ADDRESSES to allow access to local exploitable services. Version 4.2.0-rc2 has a patch for the issue.

CNA Affected

[
  {
    "vendor": "mastodon",
    "product": "mastodon",
    "versions": [
      {
        "version": ">= 4.2.0-beta1, < 4.2.0-rc2",
        "status": "affected"
      }
    ]
  }
]

References

github.com/mastodon/mastodon/commit/94893cf24fc95b32cc7a756262acbe008c20a9d2

github.com/mastodon/mastodon/security/advisories/GHSA-hcqf-fw2r-52g4

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

49.1%

JSON

Related for CVELIST:CVE-2023-42450