Vulnerability · Published Jan 12, 2024 · Assigned by GitHub_M

CVE-2023-49801Lif Auth Server vulnerable to uncontrolled data in path expression

Medium 4.2

In plain English

A medium-severity path traversal in Lif-Auth-Server from Lif-Platforms. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).

Severity (CVSS 3.1)4.2Medium

Exploit odds (30 days)0.4%top 68.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Lif Auth Server is a server for validating logins, managing information, and account recovery for Lif Accounts. The issue relates to the `get_pfp` and `get_banner` routes on Auth Server. The issue is that there is no check to ensure that the file that Auth Server is receiving through these URLs is correct. This could allow an attacker access to files they shouldn't have access to. This issue has been patched in version 1.4.0.

Affected products (as reported)

Vendor	Product	Versions
Lif-Platforms	Lif-Auth-Server	>= 1.3.2, < 1.4.0

Weakness: CWE-22, CWE-23 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

References

https://github.com/Lif-Platforms/Lif-Auth-Server/security/advisories/GHSA-3v77-pvqq-qg3f x_refsource_CONFIRM
https://github.com/Lif-Platforms/Lif-Auth-Server/commit/c235bcc2ee65e4a0dfb10284cf2cbc750213efeb x_refsource_MISC