CVE-2023-50258mediumCWE-918

CVE-2023-50258: falha de média gravidade em pymedusa Medusa

Blind SSRF in `/home/testdiscord` endpoint

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Medusa

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.7%
Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated blind server-side request forgery (SSRF). The `testDiscord` request handler in `medusa/server/web/home/handler.py` does not validate the user-controlled `discord_webhook` variable and passes it to the `notifiers.discord_notifier.test_notify` method, then `_notify_discord` and finally `_send_discord_msg` method, which sends a POST request to the user-controlled URL on line 64 in `/medusa/notifiers/discord.py`, which leads to a blind server-side request forgery. This issue allows for crafting POST requests on behalf of the Medusa server. Version 1.0.19 contains a fix for the issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
pymedusa · Medusa
CVEs relacionadas — pymedusa Medusa

No mesmo produto, das mais perigosas para as menos.

CVE-2023-28627HIGHOS Command Injection via GIT_PATH in pymedusaEPSS 0.8%CVE-2023-50259MEDIUMBlind SSRF in /home/testslack endpoint EPSS 0.6%