pwndoc DOCX Template special elements used in a template engine

Summaryinfo

A vulnerability labeled as problematic has been found in pwndoc. This issue affects some unknown processing of the component DOCX Template Handler. Executing a manipulation can lead to improper neutralization of special elements used in a template engine. This vulnerability is tracked as CVE-2024-55652. The attack can be launched remotely. No exploit exists. A patch should be applied to remediate this issue.

Detailsinfo

A vulnerability was found in pwndoc (the affected version unknown). It has been declared as problematic. This vulnerability affects an unknown part of the component DOCX Template Handler. The manipulation with an unknown input leads to a improper neutralization of special elements used in a template engine vulnerability. The CWE definition for the vulnerability is CWE-1336. The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

PenDoc is a penetration testing reporting application. Prior to commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, an attacker can write a malicious docx template containing expressions that escape the JavaScript sandbox to execute arbitrary code on the system. An attacker who can control the contents of the template document is able to execute arbitrary code on the system. By default, only users with the `admin` role are able to create or update templates. Commit 1d4219c596f4f518798492e48386a20c6e9a2fe6 patches the issue.

The advisory is available at github.com. This vulnerability was named CVE-2024-55652 since 12/10/2024. The exploitation appears to be easy. The attack can be initiated remotely. Additional levels of successful authentication are required for exploitation. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1221 by the MITRE ATT&CK project.

Applying the patch 1d4219c596f4f518798492e48386a20c6e9a2fe6 is able to eliminate this problem. The bugfix is ready for download at github.com.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• pwndoc

License

• open-source

Website

• Product: https://github.com/pwndoc/pwndoc/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion