Multiple vulnerabilities in openapi-python-client



Risk Medium
Patch available YES
Number of vulnerabilities 2
CVE-ID CVE-2020-15142
CVE-2020-15141
CWE-ID CWE-94
CWE-22
Exploitation vector Network
Public exploit N/A
Vulnerable software
 openapi-python-client
Web applications / Modules and components for CMS

Vendor Triax Technologies

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Code Injection

EUVDB-ID: #VU46119

Risk: Medium

CVSSv4.0: 5.8 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/U:Green]

CVE-ID: CVE-2020-15142

CWE-ID: CWE-94 - Improper Control of Generation of Code ('Code Injection')

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to clients generated with a maliciously crafted OpenAPI Document can generate arbitrary Python code. A remote authenticated attacker can send a specially crafted request and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

openapi-python-client: 0.1.0 - 0.5.2

CPE2.3 External links

https://github.com/triaxtec/openapi-python-client/blob/main/CHANGELOG.md#053---2020-08-13
https://github.com/triaxtec/openapi-python-client/commit/f7a56aae32cba823a77a84a1f10400799b19c19a
https://github.com/triaxtec/openapi-python-client/security/advisories/GHSA-9x4c-63pf-525f
https://pypi.org/project/openapi-python-client/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Path traversal

EUVDB-ID: #VU46120

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-15141

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences. A remote authenticated attacker can place generated files in arbitrary locations on disk.

Mitigation

Install update from vendor's website.

Vulnerable software versions

openapi-python-client: 0.1.0 - 0.5.2

CPE2.3 External links

https://github.com/triaxtec/openapi-python-client/blob/main/CHANGELOG.md#053---2020-08-13
https://github.com/triaxtec/openapi-python-client/commit/3e7dfae5d0b3685abf1ede1bc6c086a116ac4746
https://github.com/triaxtec/openapi-python-client/security/advisories/GHSA-7wgr-7666-7pwj
https://pypi.org/project/openapi-python-client


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###