CVE-2024-31223mediumobserved exploitationCWE-497

CVE-2024-31223: medium-severity vulnerability in ethyca fides

Fides Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL

Published · Updated

Follow this CVE+ Monitor fides+ Monitor ethyca-fides

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

50Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actcvss 5.3epss 1.1%
from disclosure to weapon
Published on NVDJul 3
VulnCheckJun 13
In short

A vulnerability in Fides Privacy Center allows attackers to discover the private server URL configuration through an unauthenticated HTTP request, exposing sensitive information like internal IP addresses and ports.

Technical detail

An information disclosure vulnerability (CWE-497) in Fides versions 2.19.0 through 2.39.1 permits unauthenticated attackers to retrieve the SERVER_SIDE_FIDES_API_URL environment variable value via HTTP GET requests to the Privacy Center, disclosing backend infrastructure details including private IPs, domain names, and ports. Fixed in version 2.39.2rc0.

Summary generated and translated by AI from the official description.
Fides is an open-source privacy engineering platform, and `SERVER_SIDE_FIDES_API_URL` is a server-side configuration environment variable used by the Fides Privacy Center to communicate with the Fides webserver backend. The value of this variable is a URL which typically includes a private IP address, private domain name, and/or port. A vulnerability present starting in version 2.19.0 and prior to version 2.39.2rc0 allows an unauthenticated attacker to make a HTTP GET request from the Privacy Center that discloses the value of this server-side URL. This could result in disclosure of server-side configuration giving an attacker information on server-side ports, private IP addresses, and/or private domain names. The vulnerability has been patched in Fides version 2.39.2rc0. No known workarounds are available.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
ethyca · fides
Related CVEs — ethyca fides

In the same product, most dangerous first.

CVE-2023-36827HIGHFides vulnerable to Path Traversal in Webserver APIEPSS 1.5%CVE-2024-38537NONEInclusion of Untrusted polyfill.io Code Vulnerability in fides.jsEPSS 1.4%CVE-2024-45053CRITICALRemote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating EngineEPSS 1.3%CVE-2023-48224HIGHCryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fidesEPSS 1.0%CVE-2023-41319HIGHRemote Code Execution in Custom Integration Upload in FidesEPSS 0.9%CVE-2023-46125MEDIUMFides Information Disclosure Vulnerability in Config API EndpointEPSS 0.9%