CVE-2024-31454 – psitransfer

Package

Manager: npm
Name: psitransfer
Vulnerable Version: >=0 <2.2.0

Severity

Level: Medium

CVSS v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

EPSS: 0.00109 pctl0.29797

Details

PsiTransfer: File integrity violation ### Summary The absence of restrictions on the endpoint, which is designed for uploading files, allows an attacker who received the id of a file distribution to change the files that are in this distribution. ### Details Vulnerable endpoint: PATCH /files/{{id}} ### PoC 1. Create a file distribution. 2. Go to the link address for downloading files and download the file (in this case, the attacker receives the file id from the download request). 3. Send a PATCH /files/{{id}} request with arbitrary content in the request body. Thus, the file with the specified id will be changed. What the attacker specifies in the body of the request will be added to the end of the original content. In the future, users will download the modified file. ### Impact The vulnerability allows an attacker to influence those users who come to the file distribution after him and slip the victim files with a malicious or phishing signature.

Metadata

Created: 2024-04-05T17:15:27Z
Modified: 2024-04-09T18:47:05Z
Source: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-2p2x-p7wj-j5h2/GHSA-2p2x-p7wj-j5h2.json
CWE IDs: ["CWE-434"]
Alternative ID: GHSA-2p2x-p7wj-j5h2
Finding: F027
Auto approve: 1