LMFDBに認証なしでコマンド実行の脆弱性、修正版あり
Summary
LMFDBのWebアプリに、ログインなしで任意のOSコマンドを実行される脆弱性があります。自前でLMFDBを公開している組織は、修正コミット01829bdを含む状態へ更新し、侵害の跡も調べてください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
LMFDBのWebアプリに、ログインなしで任意のOSコマンドを実行される脆弱性があります。自前でLMFDBを公開している組織は、修正コミット01829bdを含む状態へ更新し、侵害の跡も調べてください。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| LMFDB | LMFDB |
< 01829bd09b692c720aad30c952758a20630573d4 |
01829bd09b692c720aad30c952758a20630573d4 |
Original description The description as published by the source.
LMFDB before commit 01829bd contains a server-side template injection vulnerability in the render_knowl function that allows unauthenticated attackers to inject Jinja expressions via request parameters. Attackers can supply crafted query-string values or 'content' data to /knowledge/render/ to reach Python builtins and execute operating system commands as the web application account.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- advisory github.com
- advisory vulncheck.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- patch github.com
- web github.com