CVE-2024-50334— Scoold 安全漏洞
公开利用映射 1
Nuclei · 1 CVE-2024-50334.yaml [template]
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2024-50334 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Semicolon Path Injection on API /api;/config
来源: CVE Program / CVE List V5
Vulnerability Description
Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a semicolon in the URL, attackers can bypass authentication and gain unauthorised access to sensitive configuration data. Furthermore, PUT requests on the /api;/config endpoint while setting the Content-Type: application/hocon header allow unauthenticated attackers to file reading via HOCON file inclusion. This allows attackers to retrieve sensitive information such as configuration files from the server, which can be leveraged for further exploitation. The vulnerability has been fixed in Scoold 1.64.0. A workaround would be to disable the Scoold API with scoold.api_enabled = false.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
来源: CVE Program / CVE List V5
Vulnerability Type
使用候选路径或通道进行的认证绕过
来源: CVE Program / CVE List V5
Vulnerability Title
Scoold 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Scoold是Erudika开源的一个团队问答和知识共享平台。 Scoold存在安全漏洞，该漏洞源于/api;/config端点上发现了一个分号路径注入漏洞，通过在 URL 中附加分号，攻击者可以绕过身份验证并获得对敏感配置数据的未经授权的访问权限。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2024-50334 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a semicolon in the URL, attackers can bypass authentication and gain unauthorised access to sensitive configuration data. Furthermore, PUT requests on the /api;/config endpoint while setting the Content-Type- application/hocon header allow unauthenticated attackers to file reading via HOCON file inclusion. This allows attackers to retrieve sensitive information such as configuration files from the server, which can be leveraged for further exploitation. The vulnerability has been fixed in Scoold 1.64.0. A workaround would be to disable the Scoold API with scoold.api_enabled = false. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50334.yaml | POC详情 |
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2024-50334 的情报信息
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same weakness: CWE-288
V. Comments for CVE-2024-50334
暂无评论