Erlang OTP FTP Client SSRF Vulnerability (CVE-2024-48858) Advisory

Vulnerability Overview Vulnerability Name: FTP Client PASV Response IP Not Validated Against Control Peer, Enabling SSRF and FTP Bounce Attacks Vulnerability Description: The vulnerability exists in the Erlang/OTP FTP client, specifically within the function. The vulnerability allows an attacker to cause the client to connect to an unexpected IP address by crafting a malicious FTP server response, thereby enabling Server-Side Request Forgery (SSRF) and FTP bounce attacks. Affected Versions Affected Versions: OTP: >= 17.4 ftp (otp): >= 1.0 inets (otp): >= 5.10.4 Unaffected Versions: OTP: 29.0.2, 28.5.0.2, 27.3.4.13 ftp (otp): 1.2.6, 1.2.4.1, 1.2.3.1 inets (otp): 7.0 Remediation Patched Versions: OTP: 29.0.2, 28.5.0.2, 27.3.4.13 ftp (otp): 1.2.6, 1.2.4.1, 1.2.3.1 inets (otp): 7.0 Temporary Mitigations: Call with the option to use EPSV mode, which avoids including IP addresses in the server response. Call with the option to use Active mode, where the client listens for and connects to the server. Call with the option to use IPv6, which also selects the EPSV path. Additional Information CVSS Score: 6.3 / 10 Vulnerability Type: Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Impact Metrics: Confidentiality: Low Integrity: Low Availability: Low Subsequent Impact Metrics: Confidentiality: Low Integrity: Low Availability: Low CVE ID: CVE-2024-48858 Weakness: CWE-918 Contributors: Discoverer: maenchen Reviewer: IngelaAndlin Acknowledgments: Thanks to Jonatan Marenchen for discovering and responsibly disclosing this vulnerability. Code Block No POC code or exploit code.

Goal Reached Thanks to every supporter — we hit 100%!

Erlang OTP FTP Client SSRF Vulnerability (CVE-2024-48858) Advisory

More from this source