Vulnerability · Published Mar 27, 2024 · Assigned by GitHub_M

CVE-2024-29887Serverpod client accepts any certificate

High 7.4

In plain English

A high-severity improper certificate validation in serverpod from serverpod. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)7.4High

Exploit odds (30 days)0.3%top 79.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Serverpod is an app and web server, built for the Flutter and Dart ecosystem. This bug bypassed the validation of TSL certificates on all none web HTTP clients in the `serverpod_client` package. Making them susceptible to a man in the middle attack against encrypted traffic between the client device and the server. An attacker would need to be able to intercept the traffic and highjack the connection to the server for this vulnerability to be used. Upgrading to version `1.2.6` resolves this issue.

Affected products (as reported)

Vendor	Product	Versions
serverpod	serverpod	< 1.2.6

Weakness: CWE-295 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

References

https://github.com/serverpod/serverpod/security/advisories/GHSA-h6x7-r5rg-x5fw x_refsource_CONFIRM
https://github.com/serverpod/serverpod/commit/d55bf8d12967fc7955a875cb3e0f9693bd6d2c71 x_refsource_MISC