PrivateBin up to 1.7.3 authentication bypass

Summaryinfo

A vulnerability, which was classified as problematic, was found in PrivateBin up to 1.7.3. This affects an unknown function. Executing a manipulation can lead to authentication bypass. This vulnerability is handled as CVE-2024-39899. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in PrivateBin up to 1.7.3. It has been declared as problematic. This vulnerability affects some unknown functionality. The manipulation with an unknown input leads to a authentication bypass vulnerability. The CWE definition for the vulnerability is CWE-305. The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error. As an impact it is known to affect integrity. CVE summarizes:

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. In v1.5, PrivateBin introduced the YOURLS server-side proxy. The idea was to allow using the YOURLs URL shortener without running the YOURLs instance without authentication and/or exposing the authentication token to the public, allowing anyone to shorten any URL. With the proxy mechanism, anyone can shorten any URL pointing to the configured PrivateBin instance. The vulnerability allowed other URLs to be shortened, as long as they contain the PrivateBin instance, defeating the limit imposed by the proxy. This vulnerability is fixed in 1.7.4.

The advisory is shared for download at github.com. This vulnerability was named CVE-2024-39899 since 07/02/2024. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available.

Upgrading to version 1.7.4 eliminates this vulnerability. Applying the patch 0c4e810e6728f67d678458838d8430dfba4fcca4 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Name

• PrivateBin

Version

• 1.7.0
• 1.7.1
• 1.7.2
• 1.7.3

License

• open-source

Website

• Product: https://github.com/PrivateBin/PrivateBin/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion