CVE-2018-6651

Опубликовано: 05 фев. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 9.3

EPSS Низкий

Описание

In the uncurl_ws_accept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation (accepting an arbitrary substring match) for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full control over the victim's computer.

Ссылки

https://gist.github.com/Zenexer/ac7601c0e367d876353137e5099b18a7
https://github.com/chrisd1100/uncurl/commit/448cd13e7b18c83855d706c564341ddd1e38e769
Patch
Third Party Advisory
https://github.com/chrisd1100/uncurl/releases/tag/0.07
Third Party Advisory
https://gist.github.com/Zenexer/ac7601c0e367d876353137e5099b18a7
https://github.com/chrisd1100/uncurl/commit/448cd13e7b18c83855d706c564341ddd1e38e769
Patch
Third Party Advisory
https://github.com/chrisd1100/uncurl/releases/tag/0.07
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:uncurl_project:uncurl:*:*:*:*:*:*:*:*

Версия до 0.07 (исключая)

Конфигурация 2

cpe:2.3:a:parsecgaming:parsec:*:*:*:*:*:*:*:*

Версия до 140-3 (исключая)

EPSS

Процентиль: 63%

0.00437

Низкий

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-g952-h9rv-wc2r