CVE-2022-24740 - Vulnerability Details

Vendors	Products
Plone	Volto

Link	Providers
https://github.com/plone/volto/pull/3051
https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "volto", "vendor": "plone", "versions": [{"status": "affected", "version": ">= 14.0.0-alpha.5, < 15.0.0-alpha.0"}]}], "descriptions": [{"lang": "en", "value": "Volto is a ReactJS-based frontend for the Plone Content Management System. Between versions 14.0.0-alpha.5 and 15.0.0-alpha.0, a user could have their authentication cookie replaced with an authentication cookie from another user, effectively giving them control of the other user's account and privileges. This occurs when using an outdated version of the `react-cookie` library and a server is under high load. A proof of concept does not currently exist, but it is possible for this issue to occur in the wild. The patch and fix is present in Volto 15.0.0-alpha.0. As a workaround, one may manually upgrade the `react-cookie` package to 4.1.1 and then override all Volto components that use this library."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-287", "description": "CWE-287: Improper Authentication", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-03-14T22:15:13", "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/plone/volto/pull/3051"}], "source": {"advisory": "GHSA-cfhh-xgwq-5r67", "discovery": "UNKNOWN"}, "title": "Improper Authentication in Volto", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security-advisories@github.com", "ID": "CVE-2022-24740", "STATE": "PUBLIC", "TITLE": "Improper Authentication in Volto"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "volto", "version": {"version_data": [{"version_value": ">= 14.0.0-alpha.5, < 15.0.0-alpha.0"}]}}]}, "vendor_name": "plone"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Volto is a ReactJS-based frontend for the Plone Content Management System. Between versions 14.0.0-alpha.5 and 15.0.0-alpha.0, a user could have their authentication cookie replaced with an authentication cookie from another user, effectively giving them control of the other user's account and privileges. This occurs when using an outdated version of the `react-cookie` library and a server is under high load. A proof of concept does not currently exist, but it is possible for this issue to occur in the wild. The patch and fix is present in Volto 15.0.0-alpha.0. As a workaround, one may manually upgrade the `react-cookie` package to 4.1.1 and then override all Volto components that use this library."}]}, "impact": {"cvss": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-287: Improper Authentication"}]}]}, "references": {"reference_data": [{"name": "https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67", "refsource": "CONFIRM", "url": "https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67"}, {"name": "https://github.com/plone/volto/pull/3051", "refsource": "MISC", "url": "https://github.com/plone/volto/pull/3051"}]}, "source": {"advisory": "GHSA-cfhh-xgwq-5r67", "discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T04:20:50.173Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/plone/volto/pull/3051"}]}]}, "cveMetadata": {"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "cveId": "CVE-2022-24740", "datePublished": "2022-03-14T22:15:13", "dateReserved": "2022-02-10T00:00:00", "dateUpdated": "2024-08-03T04:20:50.173Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : volto (string)

vendor : plone (string)

versions : [ »

0 : { »

status : affected (string)

version : >= 14.0.0-alpha.5, < 15.0.0-alpha.0 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Volto is a ReactJS-based frontend for the Plone Content Management System. Between versions 14.0.0-alpha.5 and 15.0.0-alpha.0, a user could have their authentication cookie replaced with an authentication cookie from another user, effectively giving them control of the other user's account and privileges. This occurs when using an outdated version of the `react-cookie` library and a server is under high load. A proof of concept does not currently exist, but it is possible for this issue to occur in the wild. The patch and fix is present in Volto 15.0.0-alpha.0. As a workaround, one may manually upgrade the `react-cookie` package to 4.1.1 and then override all Volto components that use this library. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L (string)

version : 3.1 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-287 (string)

description : CWE-287: Improper Authentication (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2022-03-14T22:15:13 (string)

orgId : a0819718-46f1-4df5-94e2-005712e83aaa (string)

shortName : GitHub_M (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://github.com/plone/volto/pull/3051 (string)

}

]

source : { »

advisory : GHSA-cfhh-xgwq-5r67 (string)

discovery : UNKNOWN (string)

}

title : Improper Authentication in Volto (string)

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : security-advisories@github.com (string)

ID : CVE-2022-24740 (string)

STATE : PUBLIC (string)

TITLE : Improper Authentication in Volto (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : volto (string)

version : { »

version_data : [ »

0 : { »

version_value : >= 14.0.0-alpha.5, < 15.0.0-alpha.0 (string)

}

]

}

]

}

vendor_name : plone (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Volto is a ReactJS-based frontend for the Plone Content Management System. Between versions 14.0.0-alpha.5 and 15.0.0-alpha.0, a user could have their authentication cookie replaced with an authentication cookie from another user, effectively giving them control of the other user's account and privileges. This occurs when using an outdated version of the `react-cookie` library and a server is under high load. A proof of concept does not currently exist, but it is possible for this issue to occur in the wild. The patch and fix is present in Volto 15.0.0-alpha.0. As a workaround, one may manually upgrade the `react-cookie` package to 4.1.1 and then override all Volto components that use this library. (string)

}

]

}

impact : { »

cvss : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L (string)

version : 3.1 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-287: Improper Authentication (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67 (string)

refsource : CONFIRM (string)

url : https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67 (string)

}

1 : { »

name : https://github.com/plone/volto/pull/3051 (string)

refsource : MISC (string)

url : https://github.com/plone/volto/pull/3051 (string)

}

]

}

source : { »

advisory : GHSA-cfhh-xgwq-5r67 (string)

discovery : UNKNOWN (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T04:20:50.173Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://github.com/plone/volto/pull/3051 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : a0819718-46f1-4df5-94e2-005712e83aaa (string)

assignerShortName : GitHub_M (string)

cveId : CVE-2022-24740 (string)

datePublished : 2022-03-14T22:15:13 (string)

dateReserved : 2022-02-10T00:00:00 (string)

dateUpdated : 2024-08-03T04:20:50.173Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:plone:volto:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "2E7BD0E0-F1F4-4BF8-8F28-A854D2913697", "versionEndIncluding": "14.10.0", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:-:*:*:*:node.js:*:*", "matchCriteriaId": "60B6B474-333B-4990-A3C6-2AE21C35E4FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha10:*:*:*:node.js:*:*", "matchCriteriaId": "E2A552C6-510A-4402-8D36-D7A135387BA1", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha11:*:*:*:node.js:*:*", "matchCriteriaId": "1616F781-5110-4CC2-AADD-72F8CE3A9CFF", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha12:*:*:*:node.js:*:*", "matchCriteriaId": "531D33BA-E569-4465-93D9-7C4E09CE68E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha13:*:*:*:node.js:*:*", "matchCriteriaId": "BF717E0B-196F-4132-8AFD-7A734D39FB34", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha14:*:*:*:node.js:*:*", "matchCriteriaId": "64AB5576-987F-4762-9C50-E2C5D5E3FDFA", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha15:*:*:*:node.js:*:*", "matchCriteriaId": "133BF4F5-2288-4B40-B54B-1009DD01D895", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha16:*:*:*:node.js:*:*", "matchCriteriaId": "A4BEF957-A8DE-421B-B720-935E6E6BB9EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha17:*:*:*:node.js:*:*", "matchCriteriaId": "F0971799-2693-4030-BD1D-51E40A61199F", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha18:*:*:*:node.js:*:*", "matchCriteriaId": "CD8E68A2-E8E4-40BF-8D49-C07453A0FEDB", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha19:*:*:*:node.js:*:*", "matchCriteriaId": "59CB7B21-5889-46FD-970F-B09FF8D60B13", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha20:*:*:*:node.js:*:*", "matchCriteriaId": "ACE67F50-325E-4462-997E-C0F297CF920D", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha21:*:*:*:node.js:*:*", "matchCriteriaId": "2AA47A36-244F-4654-91AF-98A05D620169", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha22:*:*:*:node.js:*:*", "matchCriteriaId": "EA571792-AB7B-4A94-96CB-86A829902DC2", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha23:*:*:*:node.js:*:*", "matchCriteriaId": "B6A677A4-1C58-4FF9-A931-76DF96B2784A", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha24:*:*:*:node.js:*:*", "matchCriteriaId": "3CBF93E1-41B3-4CB9-AE37-A714BDEC6B1C", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha25:*:*:*:node.js:*:*", "matchCriteriaId": "EF197A8E-AFA1-4359-BB6E-E0E59786B6D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha26:*:*:*:node.js:*:*", "matchCriteriaId": "A9CEACFB-27A7-47D7-BB9F-1BEEF4048693", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha27:*:*:*:node.js:*:*", "matchCriteriaId": "E20A0DBE-42D8-4B66-B1D2-205FD7704796", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha28:*:*:*:node.js:*:*", "matchCriteriaId": "0B9F8356-065A-417D-BD35-981619FAEFC6", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha29:*:*:*:node.js:*:*", "matchCriteriaId": "1ABC60C5-DCEA-434F-82DB-3924D9F6F450", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha30:*:*:*:node.js:*:*", "matchCriteriaId": "C404E110-20A8-4149-A8DA-135E1785E2DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha31:*:*:*:node.js:*:*", "matchCriteriaId": "475A2C57-6A5B-4787-92FE-F6D4552744FD", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha32:*:*:*:node.js:*:*", "matchCriteriaId": "171719F9-918D-413F-AB60-5261A4205CEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha33:*:*:*:node.js:*:*", "matchCriteriaId": "7241B9C4-277C-43A6-8C32-79677B334EA4", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha34:*:*:*:node.js:*:*", "matchCriteriaId": "5449FA9F-0C01-4259-8B6E-6DAA9F9C5F54", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha35:*:*:*:node.js:*:*", "matchCriteriaId": "8A76D371-4BDA-4751-B511-FCF99FAEC3E0", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha36:*:*:*:node.js:*:*", "matchCriteriaId": "5DCCE12A-131B-4A2A-9DB3-3DCB252E2FB5", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha37:*:*:*:node.js:*:*", "matchCriteriaId": "E4719B30-4F29-4CD9-9B71-6F4FF000BC17", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha38:*:*:*:node.js:*:*", "matchCriteriaId": "71EFFE80-FEAA-4F6F-AF5C-2CC1F8B1A5D3", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha39:*:*:*:node.js:*:*", "matchCriteriaId": "1F7327CD-E127-44C5-A458-5EF227D154D6", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha40:*:*:*:node.js:*:*", "matchCriteriaId": "4CB1DCB6-45C1-40FD-92A0-E14E75D28C05", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha41:*:*:*:node.js:*:*", "matchCriteriaId": "E30BAF62-8A05-4CEA-95D6-C97E20016019", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha42:*:*:*:node.js:*:*", "matchCriteriaId": "7F193851-4373-4B00-A12B-9D8C4D9F1475", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha43:*:*:*:node.js:*:*", "matchCriteriaId": "4D5542A2-3C0B-4B11-B454-4196FD2A6714", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha6:*:*:*:node.js:*:*", "matchCriteriaId": "2F8AECF3-3092-4C3A-AF90-571C4950F3F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha7:*:*:*:node.js:*:*", "matchCriteriaId": "9C3EA246-64F5-4AE9-9C2C-72E1AD329A6E", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha8:*:*:*:node.js:*:*", "matchCriteriaId": "A22D0AAD-C038-42C2-A740-A8B0470E279B", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:14.0.0:alpha9:*:*:*:node.js:*:*", "matchCriteriaId": "6F4F65D0-263E-4DC4-B33A-832A35ADD086", "vulnerable": true}, {"criteria": "cpe:2.3:a:plone:volto:15.0.0:alpha0:*:*:*:node.js:*:*", "matchCriteriaId": "468217AF-833A-4A73-87C5-4BABFB3CE67A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Volto is a ReactJS-based frontend for the Plone Content Management System. Between versions 14.0.0-alpha.5 and 15.0.0-alpha.0, a user could have their authentication cookie replaced with an authentication cookie from another user, effectively giving them control of the other user's account and privileges. This occurs when using an outdated version of the `react-cookie` library and a server is under high load. A proof of concept does not currently exist, but it is possible for this issue to occur in the wild. The patch and fix is present in Volto 15.0.0-alpha.0. As a workaround, one may manually upgrade the `react-cookie` package to 4.1.1 and then override all Volto components that use this library."}, {"lang": "es", "value": "Volto es un frontend basado en ReactJS para el Sistema de Administraci\u00f3n de Contenidos Plone. Entre las versiones 14.0.0-alpha.5 y 15.0.0-alpha.0, un usuario pod\u00eda tener su cookie de autenticaci\u00f3n reemplazada por una cookie de autenticaci\u00f3n de otro usuario, d\u00e1ndole efectivamente el control de la cuenta y los privilegios del otro usuario. Esto ocurre cuando es usada una versi\u00f3n obsoleta de la biblioteca \"react-cookie\" y un servidor est\u00e1 bajo alta carga. Actualmente no se presenta una prueba de concepto, pero es posible que este problema ocurra \"in the wild\". El parche y la correcci\u00f3n est\u00e1n presentes en Volto versi\u00f3n 15.0.0-alpha.0. Como medida de mitigaci\u00f3n, puede actualizarse manualmente el paquete \"react-cookie\" a versi\u00f3n 4.1.1 y luego anular todos los componentes de Volto que usen esta biblioteca"}], "id": "CVE-2022-24740", "lastModified": "2024-11-21T06:50:59.563", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 3.4, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-03-14T23:15:08.303", "references": [{"source": "security-advisories@github.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/plone/volto/pull/3051"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/plone/volto/pull/3051"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "security-advisories@github.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:plone:volto:*:*:*:*:*:node.js:*:* (string)

matchCriteriaId : 2E7BD0E0-F1F4-4BF8-8F28-A854D2913697 (string)

versionEndIncluding : 14.10.0 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:-:*:*:*:node.js:*:* (string)

matchCriteriaId : 60B6B474-333B-4990-A3C6-2AE21C35E4FB (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha10:*:*:*:node.js:*:* (string)

matchCriteriaId : E2A552C6-510A-4402-8D36-D7A135387BA1 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha11:*:*:*:node.js:*:* (string)

matchCriteriaId : 1616F781-5110-4CC2-AADD-72F8CE3A9CFF (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha12:*:*:*:node.js:*:* (string)

matchCriteriaId : 531D33BA-E569-4465-93D9-7C4E09CE68E8 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha13:*:*:*:node.js:*:* (string)

matchCriteriaId : BF717E0B-196F-4132-8AFD-7A734D39FB34 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha14:*:*:*:node.js:*:* (string)

matchCriteriaId : 64AB5576-987F-4762-9C50-E2C5D5E3FDFA (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha15:*:*:*:node.js:*:* (string)

matchCriteriaId : 133BF4F5-2288-4B40-B54B-1009DD01D895 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha16:*:*:*:node.js:*:* (string)

matchCriteriaId : A4BEF957-A8DE-421B-B720-935E6E6BB9EF (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha17:*:*:*:node.js:*:* (string)

matchCriteriaId : F0971799-2693-4030-BD1D-51E40A61199F (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha18:*:*:*:node.js:*:* (string)

matchCriteriaId : CD8E68A2-E8E4-40BF-8D49-C07453A0FEDB (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha19:*:*:*:node.js:*:* (string)

matchCriteriaId : 59CB7B21-5889-46FD-970F-B09FF8D60B13 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha20:*:*:*:node.js:*:* (string)

matchCriteriaId : ACE67F50-325E-4462-997E-C0F297CF920D (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha21:*:*:*:node.js:*:* (string)

matchCriteriaId : 2AA47A36-244F-4654-91AF-98A05D620169 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha22:*:*:*:node.js:*:* (string)

matchCriteriaId : EA571792-AB7B-4A94-96CB-86A829902DC2 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha23:*:*:*:node.js:*:* (string)

matchCriteriaId : B6A677A4-1C58-4FF9-A931-76DF96B2784A (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha24:*:*:*:node.js:*:* (string)

matchCriteriaId : 3CBF93E1-41B3-4CB9-AE37-A714BDEC6B1C (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha25:*:*:*:node.js:*:* (string)

matchCriteriaId : EF197A8E-AFA1-4359-BB6E-E0E59786B6D0 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha26:*:*:*:node.js:*:* (string)

matchCriteriaId : A9CEACFB-27A7-47D7-BB9F-1BEEF4048693 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha27:*:*:*:node.js:*:* (string)

matchCriteriaId : E20A0DBE-42D8-4B66-B1D2-205FD7704796 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha28:*:*:*:node.js:*:* (string)

matchCriteriaId : 0B9F8356-065A-417D-BD35-981619FAEFC6 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha29:*:*:*:node.js:*:* (string)

matchCriteriaId : 1ABC60C5-DCEA-434F-82DB-3924D9F6F450 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha30:*:*:*:node.js:*:* (string)

matchCriteriaId : C404E110-20A8-4149-A8DA-135E1785E2DD (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha31:*:*:*:node.js:*:* (string)

matchCriteriaId : 475A2C57-6A5B-4787-92FE-F6D4552744FD (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha32:*:*:*:node.js:*:* (string)

matchCriteriaId : 171719F9-918D-413F-AB60-5261A4205CEF (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha33:*:*:*:node.js:*:* (string)

matchCriteriaId : 7241B9C4-277C-43A6-8C32-79677B334EA4 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha34:*:*:*:node.js:*:* (string)

matchCriteriaId : 5449FA9F-0C01-4259-8B6E-6DAA9F9C5F54 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha35:*:*:*:node.js:*:* (string)

matchCriteriaId : 8A76D371-4BDA-4751-B511-FCF99FAEC3E0 (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha36:*:*:*:node.js:*:* (string)

matchCriteriaId : 5DCCE12A-131B-4A2A-9DB3-3DCB252E2FB5 (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha37:*:*:*:node.js:*:* (string)

matchCriteriaId : E4719B30-4F29-4CD9-9B71-6F4FF000BC17 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha38:*:*:*:node.js:*:* (string)

matchCriteriaId : 71EFFE80-FEAA-4F6F-AF5C-2CC1F8B1A5D3 (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha39:*:*:*:node.js:*:* (string)

matchCriteriaId : 1F7327CD-E127-44C5-A458-5EF227D154D6 (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha40:*:*:*:node.js:*:* (string)

matchCriteriaId : 4CB1DCB6-45C1-40FD-92A0-E14E75D28C05 (string)

vulnerable : true (boolean)

}

33 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha41:*:*:*:node.js:*:* (string)

matchCriteriaId : E30BAF62-8A05-4CEA-95D6-C97E20016019 (string)

vulnerable : true (boolean)

}

34 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha42:*:*:*:node.js:*:* (string)

matchCriteriaId : 7F193851-4373-4B00-A12B-9D8C4D9F1475 (string)

vulnerable : true (boolean)

}

35 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha43:*:*:*:node.js:*:* (string)

matchCriteriaId : 4D5542A2-3C0B-4B11-B454-4196FD2A6714 (string)

vulnerable : true (boolean)

}

36 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha6:*:*:*:node.js:*:* (string)

matchCriteriaId : 2F8AECF3-3092-4C3A-AF90-571C4950F3F2 (string)

vulnerable : true (boolean)

}

37 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha7:*:*:*:node.js:*:* (string)

matchCriteriaId : 9C3EA246-64F5-4AE9-9C2C-72E1AD329A6E (string)

vulnerable : true (boolean)

}

38 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha8:*:*:*:node.js:*:* (string)

matchCriteriaId : A22D0AAD-C038-42C2-A740-A8B0470E279B (string)

vulnerable : true (boolean)

}

39 : { »

criteria : cpe:2.3:a:plone:volto:14.0.0:alpha9:*:*:*:node.js:*:* (string)

matchCriteriaId : 6F4F65D0-263E-4DC4-B33A-832A35ADD086 (string)

vulnerable : true (boolean)

}

40 : { »

criteria : cpe:2.3:a:plone:volto:15.0.0:alpha0:*:*:*:node.js:*:* (string)

matchCriteriaId : 468217AF-833A-4A73-87C5-4BABFB3CE67A (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Volto is a ReactJS-based frontend for the Plone Content Management System. Between versions 14.0.0-alpha.5 and 15.0.0-alpha.0, a user could have their authentication cookie replaced with an authentication cookie from another user, effectively giving them control of the other user's account and privileges. This occurs when using an outdated version of the `react-cookie` library and a server is under high load. A proof of concept does not currently exist, but it is possible for this issue to occur in the wild. The patch and fix is present in Volto 15.0.0-alpha.0. As a workaround, one may manually upgrade the `react-cookie` package to 4.1.1 and then override all Volto components that use this library. (string)

}

1 : { »

lang : es (string)

value : Volto es un frontend basado en ReactJS para el Sistema de Administración de Contenidos Plone. Entre las versiones 14.0.0-alpha.5 y 15.0.0-alpha.0, un usuario podía tener su cookie de autenticación reemplazada por una cookie de autenticación de otro usuario, dándole efectivamente el control de la cuenta y los privilegios del otro usuario. Esto ocurre cuando es usada una versión obsoleta de la biblioteca "react-cookie" y un servidor está bajo alta carga. Actualmente no se presenta una prueba de concepto, pero es posible que este problema ocurra "in the wild". El parche y la corrección están presentes en Volto versión 15.0.0-alpha.0. Como medida de mitigación, puede actualizarse manualmente el paquete "react-cookie" a versión 4.1.1 y luego anular todos los componentes de Volto que usen esta biblioteca (string)

}

]

id : CVE-2022-24740 (string)

lastModified : 2024-11-21T06:50:59.563 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : PARTIAL (string)

baseScore : 6 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:M/Au:S/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 6.8 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 1.6 (number)

impactScore : 3.4 (number)

source : security-advisories@github.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.6 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-03-14T23:15:08.303 (string)

references : [ »

0 : { »

source : security-advisories@github.com (string)

tags : [ »

0 : Patch (string)

1 : Third Party Advisory (string)

]

url : https://github.com/plone/volto/pull/3051 (string)

}

1 : { »

source : security-advisories@github.com (string)

tags : [ »

0 : Patch (string)

1 : Third Party Advisory (string)

]

url : https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Third Party Advisory (string)

]

url : https://github.com/plone/volto/pull/3051 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Third Party Advisory (string)

]

url : https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67 (string)

}

]

sourceIdentifier : security-advisories@github.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-287 (string)

}

]

source : security-advisories@github.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-287 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object