Lucene search

GoogleOSV:CVE-2023-50264

HistoryDec 15, 2023 - 9:15 p.m.

CVE-2023-50264

2023-12-1521:15:08

Google

osv.dev

bazarr

arbitrary file read

vulnerability

fixed

version 1.3.1

software

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.1%

JSON

Bazarr manages and downloads subtitles. Prior to 1.3.1, Bazarr contains an arbitrary file read in /system/backup/download/ endpoint in bazarr/app/ui.py does not validate the user-controlled filename variable and uses it in the send_file function, which leads to an arbitrary file read on the system. This issue is fixed in version 1.3.1.

CPENameOperatorVersion
bazarreq0.6.9
bazarreq1.0.1-beta.8
bazarreq1.0.4-beta.18
bazarreq1.1.5-beta.13
bazarreq1.2.2-beta.0
bazarreq0.9.3-beta.19
bazarreq0.9.8-beta.6
bazarreq0.9.6-beta.36
bazarreq0.7.2.1
bazarreq1.1.2-beta.18

Name	Operator	Version
bazarr	eq	0.6.9
bazarr	eq	1.0.1-beta.8
bazarr	eq	1.0.4-beta.18
bazarr	eq	1.1.5-beta.13
bazarr	eq	1.2.2-beta.0
bazarr	eq	0.9.3-beta.19
bazarr	eq	0.9.8-beta.6
bazarr	eq	0.9.6-beta.36
bazarr	eq	0.7.2.1
bazarr	eq	1.1.2-beta.18

Rows per page:

1-10 of 5711

References

github.com/morpheus65535/bazarr/commit/17add7fbb3ae1919a40d505470d499d46df9ae6b

github.com/morpheus65535/bazarr/releases/tag/v1.3.1

securitylab.github.com/advisories/GHSL-2023-192_GHSL-2023-194_bazarr/

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.1%

JSON

Related for OSV:CVE-2023-50264