pysec - pysec-2024-123

pysec-2024-123

Vulnerability from pysec

Published

2024-11-15 11:15

Modified

2024-11-19 22:22

Severity ?

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other malicious activities. The issue is fixed in pyload-ng 0.5.0b3.dev79.

Impacted products

Name	purl
pyload-ng	pkg:pypi/pyload-ng

Aliases

CVE-2024-1240

JSON

To clipboard

{
   affected: [
      {
         package: {
            ecosystem: "PyPI",
            name: "pyload-ng",
            purl: "pkg:pypi/pyload-ng",
         },
         ranges: [
            {
               events: [
                  {
                     introduced: "0",
                  },
                  {
                     fixed: "fe94451dcc2be90b3889e2fd9d07b483c8a6dccd",
                  },
               ],
               repo: "https://github.com/pyload/pyload",
               type: "GIT",
            },
            {
               events: [
                  {
                     introduced: "0",
                  },
               ],
               type: "ECOSYSTEM",
            },
         ],
         versions: [
            "0.5.0a5.dev528",
            "0.5.0a5.dev532",
            "0.5.0a5.dev535",
            "0.5.0a5.dev536",
            "0.5.0a5.dev537",
            "0.5.0a5.dev539",
            "0.5.0a5.dev540",
            "0.5.0a5.dev545",
            "0.5.0a5.dev562",
            "0.5.0a5.dev564",
            "0.5.0a5.dev565",
            "0.5.0a6.dev570",
            "0.5.0a6.dev578",
            "0.5.0a6.dev587",
            "0.5.0a7.dev596",
            "0.5.0a8.dev602",
            "0.5.0a9.dev615",
            "0.5.0a9.dev629",
            "0.5.0a9.dev632",
            "0.5.0a9.dev641",
            "0.5.0a9.dev643",
            "0.5.0a9.dev655",
            "0.5.0a9.dev806",
            "0.5.0b1.dev1",
            "0.5.0b1.dev2",
            "0.5.0b1.dev3",
            "0.5.0b1.dev4",
            "0.5.0b1.dev5",
            "0.5.0b2.dev10",
            "0.5.0b2.dev11",
            "0.5.0b2.dev12",
            "0.5.0b2.dev9",
            "0.5.0b3.dev13",
            "0.5.0b3.dev14",
            "0.5.0b3.dev17",
            "0.5.0b3.dev18",
            "0.5.0b3.dev19",
            "0.5.0b3.dev20",
            "0.5.0b3.dev21",
            "0.5.0b3.dev22",
            "0.5.0b3.dev24",
            "0.5.0b3.dev26",
            "0.5.0b3.dev27",
            "0.5.0b3.dev28",
            "0.5.0b3.dev29",
            "0.5.0b3.dev30",
            "0.5.0b3.dev31",
            "0.5.0b3.dev32",
            "0.5.0b3.dev33",
            "0.5.0b3.dev34",
            "0.5.0b3.dev35",
            "0.5.0b3.dev38",
            "0.5.0b3.dev39",
            "0.5.0b3.dev40",
            "0.5.0b3.dev41",
            "0.5.0b3.dev42",
            "0.5.0b3.dev43",
            "0.5.0b3.dev44",
            "0.5.0b3.dev45",
            "0.5.0b3.dev46",
            "0.5.0b3.dev47",
            "0.5.0b3.dev48",
            "0.5.0b3.dev49",
            "0.5.0b3.dev50",
            "0.5.0b3.dev51",
            "0.5.0b3.dev52",
            "0.5.0b3.dev53",
            "0.5.0b3.dev54",
            "0.5.0b3.dev57",
            "0.5.0b3.dev60",
            "0.5.0b3.dev62",
            "0.5.0b3.dev64",
            "0.5.0b3.dev65",
            "0.5.0b3.dev66",
            "0.5.0b3.dev67",
            "0.5.0b3.dev68",
            "0.5.0b3.dev69",
            "0.5.0b3.dev70",
            "0.5.0b3.dev71",
            "0.5.0b3.dev72",
            "0.5.0b3.dev73",
            "0.5.0b3.dev74",
            "0.5.0b3.dev75",
            "0.5.0b3.dev76",
            "0.5.0b3.dev77",
            "0.5.0b3.dev78",
            "0.5.0b3.dev79",
            "0.5.0b3.dev80",
            "0.5.0b3.dev81",
            "0.5.0b3.dev82",
            "0.5.0b3.dev85",
            "0.5.0b3.dev87",
         ],
      },
   ],
   aliases: [
      "CVE-2024-1240",
   ],
   details: "An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other malicious activities. The issue is fixed in pyload-ng 0.5.0b3.dev79.",
   id: "PYSEC-2024-123",
   modified: "2024-11-19T22:22:34.280606+00:00",
   published: "2024-11-15T11:15:00+00:00",
   references: [
      {
         type: "EVIDENCE",
         url: "https://huntr.com/bounties/eef9513d-ccc3-4030-b574-374c5e7b887e",
      },
      {
         type: "WEB",
         url: "https://huntr.com/bounties/eef9513d-ccc3-4030-b574-374c5e7b887e",
      },
      {
         type: "FIX",
         url: "https://github.com/pyload/pyload/commit/fe94451dcc2be90b3889e2fd9d07b483c8a6dccd",
      },
   ],
   severity: [
      {
         score: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
         type: "CVSS_V3",
      },
   ],
}

cve-2024-1240

Vulnerability from cvelistv5

Published

2024-11-15 10:57

Modified

2024-11-15 19:07

Severity ?

4.6 (Medium) - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

Summary

References

▼	URL	Tags
	https://huntr.com/bounties/eef9513d-ccc3-4030-b574-374c5e7b887e
	https://github.com/pyload/pyload/commit/fe94451dcc2be90b3889e2fd9d07b483c8a6dccd

Impacted products

	Vendor	Product	Version
	pyload	pyload/pyload	Version: unspecified < pyload-ng 0.5.0b3.dev79

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:payload:payload:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "payload",
                  vendor: "payload",
                  versions: [
                     {
                        lessThan: "pyload-ng 0.5.0b3.dev79",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "LOW",
                     baseScore: 4.6,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "NONE",
                     integrityImpact: "LOW",
                     privilegesRequired: "LOW",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2024-1240",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-11-15T19:04:11.868290Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-11-15T19:07:26.471Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "pyload/pyload",
               vendor: "pyload",
               versions: [
                  {
                     lessThan: "pyload-ng 0.5.0b3.dev79",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other malicious activities. The issue is fixed in pyload-ng 0.5.0b3.dev79.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 4.6,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-601",
                     description: "CWE-601 URL Redirection to Untrusted Site",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-11-15T10:57:07.797Z",
            orgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
            shortName: "@huntr_ai",
         },
         references: [
            {
               url: "https://huntr.com/bounties/eef9513d-ccc3-4030-b574-374c5e7b887e",
            },
            {
               url: "https://github.com/pyload/pyload/commit/fe94451dcc2be90b3889e2fd9d07b483c8a6dccd",
            },
         ],
         source: {
            advisory: "eef9513d-ccc3-4030-b574-374c5e7b887e",
            discovery: "EXTERNAL",
         },
         title: "Open Redirection in pyload/pyload",
      },
   },
   cveMetadata: {
      assignerOrgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
      assignerShortName: "@huntr_ai",
      cveId: "CVE-2024-1240",
      datePublished: "2024-11-15T10:57:07.797Z",
      dateReserved: "2024-02-05T22:31:20.037Z",
      dateUpdated: "2024-11-15T19:07:26.471Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted