Vulnerability · Published Jul 1, 2024 · Assigned by GitHub_M

CVE-2024-39314toy-blog administrative token leaked through the command line parameter

Medium 4.7

In plain English

A medium-severity information exposure in toy-blog from KisaragiEffective. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.1)4.7Medium

Exploit odds (30 days)0.2%top 91.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

toy-blog is a headless content management system implementation. Starting in version 0.4.3 and prior to version 0.5.0, the administrative password was leaked through the command line parameter. The problem was patched in version 0.5.0. As a workaround, pass `--read-bearer-token-from-stdin` to the launch arguments and feed the token from the standard input in version 0.4.14 or later. Earlier versions do not have this workaround.

Affected products (as reported)

Vendor	Product	Versions
KisaragiEffective	toy-blog	>= 0.4.3, < 0.5.0

Weakness: CWE-214, CWE-200 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/KisaragiEffective/toy-blog/security/advisories/GHSA-q8g2-c3x5-gp89 x_refsource_CONFIRM
https://github.com/KisaragiEffective/toy-blog/commit/4d003e46a944d8f44ea02c63f4beefa4cbe1f4f7 x_refsource_MISC