Open-MSS up to 8.3.2 index.py filename path traversal

Summaryinfo

A vulnerability was found in Open-MSS MSS up to 8.3.2. It has been declared as critical. This issue affects some unknown processing of the file index.py. Such manipulation of the argument filename leads to path traversal. This vulnerability is traded as CVE-2024-25123. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in Open-MSS MSS up to 8.3.2 and classified as critical. Affected by this issue is some unknown processing of the file index.py. The manipulation of the argument filename with an unknown input leads to a path traversal vulnerability. Using CWE to declare the problem leads to CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. Impacted is confidentiality, integrity, and availability. CVE summarizes:

MSS (Mission Support System) is an open source package designed for planning atmospheric research flights. In file: `index.py`, there is a method that is vulnerable to path manipulation attack. By modifying file paths, an attacker can acquire sensitive information from different resources. The `filename` variable is joined with other variables to form a file path in `_file`. However, `filename` is a route parameter that can capture path type values i.e. values including slashes (\). So it is possible for an attacker to manipulate the file being read by assigning a value containing ../ to `filename` and so the attacker may be able to gain access to other files on the host filesystem. This issue has been addressed in MSS version 8.3.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The weakness was shared 02/16/2024 as GHSA-pf2h-qjcr-qvq2. The advisory is available at github.com. This vulnerability is handled as CVE-2024-25123 since 02/05/2024. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1006 by the MITRE ATT&CK project.

Upgrading to version 8.3.3 eliminates this vulnerability. Applying the patch f23033729ee930b97f8bdbd07df0174311c9b658 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Open-MSS

Name

• MSS

Version

• 8.3.0
• 8.3.1
• 8.3.2

License

• open-source

Website

• Product: https://github.com/Open-MSS/MSS/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion