En bref
- CVE-2021-3907 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant github.com/cloudflare/cfrpki, octorpki (cloudflare).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 4.2%, plus élevée que 91.0% des vulnérabilités.
- Correctif : mettre à jour vers 1.4.3, 1.4.4, 1.3.0 ou plus récent.
Description
Impact
In the case that a malicious TAL file is parsed pointing to a repository that provides a malicious ROA file which octorpki downloads, it is possible to bypass the current directory traversal mitigation to allow writing outside of the current directory.
Patches
No patch release has been made
NVD description
OctoRPKI does not escape a URI with a filename containing "..", this allows a repository to create a file, (ex. rsync://example.org/repo/../../etc/cron.daily/evil.roa), which would then be written to disk outside the base cache folder. This could allow for remote code execution on the host machine OctoRPKI is running on.
Autres vulnérabilités de github.com/cloudflare/cfrpki
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free