From b1a5ba8f459526480efe2023ef8fe9cf80e3c188 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 11 Mar 2025 16:18:40 +0000 Subject: [PATCH] Publish Advisories GHSA-5478-v2w6-c6q7 GHSA-w7f9-wqc4-3wxr --- .../GHSA-5478-v2w6-c6q7.json | 43 +++++++-- .../GHSA-w7f9-wqc4-3wxr.json | 87 +++++++++++++++++++ 2 files changed, 125 insertions(+), 5 deletions(-) rename advisories/{unreviewed => github-reviewed}/2025/03/GHSA-5478-v2w6-c6q7/GHSA-5478-v2w6-c6q7.json (53%) create mode 100644 advisories/github-reviewed/2025/03/GHSA-w7f9-wqc4-3wxr/GHSA-w7f9-wqc4-3wxr.json diff --git a/advisories/unreviewed/2025/03/GHSA-5478-v2w6-c6q7/GHSA-5478-v2w6-c6q7.json b/advisories/github-reviewed/2025/03/GHSA-5478-v2w6-c6q7/GHSA-5478-v2w6-c6q7.json similarity index 53% rename from advisories/unreviewed/2025/03/GHSA-5478-v2w6-c6q7/GHSA-5478-v2w6-c6q7.json rename to advisories/github-reviewed/2025/03/GHSA-5478-v2w6-c6q7/GHSA-5478-v2w6-c6q7.json index 89ea1b683a9..12fc9cfa168 100644 --- a/advisories/unreviewed/2025/03/GHSA-5478-v2w6-c6q7/GHSA-5478-v2w6-c6q7.json +++ b/advisories/github-reviewed/2025/03/GHSA-5478-v2w6-c6q7/GHSA-5478-v2w6-c6q7.json @@ -1,19 +1,40 @@ { "schema_version": "1.4.0", "id": "GHSA-5478-v2w6-c6q7", - "modified": "2025-03-11T09:30:30Z", + "modified": "2025-03-11T16:17:06Z", "published": "2025-03-11T09:30:30Z", "aliases": [ "CVE-2025-1550" ], + "summary": "Keras arbitrary code execution vulnerability", "details": "The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.", "severity": [ { "type": "CVSS_V4", - "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "keras" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "3.9.0" + } + ] + } + ] } ], - "affected": [], "references": [ { "type": "ADVISORY", @@ -22,6 +43,18 @@ { "type": "WEB", "url": "https://github.com/keras-team/keras/pull/20751" + }, + { + "type": "WEB", + "url": "https://github.com/keras-team/keras/commit/e67ac8ffd0c883bec68eb65bb52340c7f9d3a903" + }, + { + "type": "PACKAGE", + "url": "https://github.com/keras-team/keras" + }, + { + "type": "WEB", + "url": "https://github.com/keras-team/keras/releases/tag/v3.9.0" } ], "database_specific": { @@ -29,8 +62,8 @@ "CWE-94" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-03-11T16:17:06Z", "nvd_published_at": "2025-03-11T09:15:25Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2025/03/GHSA-w7f9-wqc4-3wxr/GHSA-w7f9-wqc4-3wxr.json b/advisories/github-reviewed/2025/03/GHSA-w7f9-wqc4-3wxr/GHSA-w7f9-wqc4-3wxr.json new file mode 100644 index 00000000000..455066aaef7 --- /dev/null +++ b/advisories/github-reviewed/2025/03/GHSA-w7f9-wqc4-3wxr/GHSA-w7f9-wqc4-3wxr.json @@ -0,0 +1,87 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w7f9-wqc4-3wxr", + "modified": "2025-03-11T16:17:42Z", + "published": "2025-03-11T16:17:42Z", + "aliases": [], + "summary": "Mockoon has a Path Traversal and LFI in the static file serving endpoint", + "details": "### Summary\nA mock API configuration for static file serving following the same approach presented in the [documentation page](https://mockoon.com/tutorials/create-endpoint-serving-static-file/), where the server filename is generated via templating features from user input is vulnerable to Path Traversal and LFI, allowing an attacker to get any file in the mock server filesystem.\nThe issue may be particularly relevant in cloud hosted server instances\n\n### Details\nIn `sendFileWithCallback`([code](https://github.com/mockoon/mockoon/blob/1ed31c4059d7f757f6cb2a43e10dc81b0d9c55a9/packages/commons-server/src/libs/server/server.ts#L1400)) and `sendFile`([code](https://github.com/mockoon/mockoon/blob/1ed31c4059d7f757f6cb2a43e10dc81b0d9c55a9/packages/commons-server/src/libs/server/server.ts#L1551)) the `filePath` variable is parsed using `TemplateParser`\n\n```js\nlet filePath = TemplateParser({\n shouldOmitDataHelper: false,\n // replace backslashes with forward slashes, but not if followed by a dot (to allow helpers with paths containing properties with dots: e.g. {{queryParam 'path.prop\\.with\\.dots'}})\n content: routeResponse.filePath.replace(/\\\\(?!\\.)/g, '/'),\n environment: this.environment,\n processedDatabuckets: this.processedDatabuckets,\n globalVariables: this.globalVariables,\n request: serverRequest,\n envVarsPrefix: this.options.envVarsPrefix\n });\n```\n\nThe path extracted from the request parameters used when composing the final file path is not sanitized and is vulnerable to path traversal exploits (e.g. `../../../../../etc/passwd`)\n\n### PoC\n#### Test setup\nThe issue has been tested with `mockoon-cli`, using the Docker image `mockoon/cli:latest`\n\n[config.json](https://github.com/user-attachments/files/18199899/config.json)\n\n```bash\n# Folder setup\nmkdir mockoon-test\ncd mockoon-test\n\n# put config.json in mockooon-test dir\n\nmkdir static\n```\n\n```bash\n# Run container\ndocker run -d --mount type=bind,source=./config.json,target=/data,readonly -v ./static:/static -p 3000:3000 mockoon/cli:latest -d data -p 3000\n```\n\n#### Payload to reproduce\nBrowsing directly to `http://localhost:3000/static/%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd` is going to display the `/etc/passwd` file in the container filesystem", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "npm", + "name": "@mockoon/commons-server" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "9.1.0" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "npm", + "name": "@mockoon/cli" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "9.1.0" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/mockoon/mockoon/security/advisories/GHSA-w7f9-wqc4-3wxr" + }, + { + "type": "WEB", + "url": "https://github.com/mockoon/mockoon/commit/c7f6e23e87dc3b8cc44e5802af046200a797bd2e" + }, + { + "type": "PACKAGE", + "url": "https://github.com/mockoon/mockoon" + }, + { + "type": "WEB", + "url": "https://github.com/mockoon/mockoon/blob/1ed31c4059d7f757f6cb2a43e10dc81b0d9c55a9/packages/commons-server/src/libs/server/server.ts#L1400" + }, + { + "type": "WEB", + "url": "https://github.com/mockoon/mockoon/blob/1ed31c4059d7f757f6cb2a43e10dc81b0d9c55a9/packages/commons-server/src/libs/server/server.ts#L1551" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22", + "CWE-73" + ], + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2025-03-11T16:17:42Z", + "nvd_published_at": null + } +} \ No newline at end of file