Lucene search

GitHub_MVULNRICHMENT:CVE-2024-39314

HistoryJul 01, 2024 - 9:33 p.m.

CVE-2024-39314 toy-blog administrative token leaked through the command line parameter

2024-07-0121:33:54

CWE-200

CWE-214

GitHub_M

github.com

cve-2024-39314; toy-blog; administrative token; command line parameter; headless content management system; version 0.4.3; version 0.5.0; launch arguments; standard input; workaround

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

High

JSON

toy-blog is a headless content management system implementation. Starting in version 0.4.3 and prior to version 0.5.0, the administrative password was leaked through the command line parameter. The problem was patched in version 0.5.0. As a workaround, pass --read-bearer-token-from-stdin to the launch arguments and feed the token from the standard input in version 0.4.14 or later. Earlier versions do not have this workaround.

CNA Affected

[
  {
    "vendor": "KisaragiEffective",
    "product": "toy-blog",
    "versions": [
      {
        "status": "affected",
        "version": ">= 0.4.3, < 0.5.0"
      }
    ]
  }
]

References

github.com/KisaragiEffective/toy-blog/commit/4d003e46a944d8f44ea02c63f4beefa4cbe1f4f7

github.com/KisaragiEffective/toy-blog/security/advisories/GHSA-q8g2-c3x5-gp89

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

High

JSON

Related for VULNRICHMENT:CVE-2024-39314