Vulnerability-Lookup

CVE-2024-49400 (GCVE-0-2024-49400)

Vulnerability from cvelistv5 – Published: 2024-10-17 17:15 – Updated: 2024-11-01 18:35

Summary

Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended to require a match on the entire string, but instead only enforced a match on a sub-string. That would have potentially allowed unauthorized commands to be executed.

Severity ?

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Permissive Regular Expression (CWE-625)

Assigner

facebook

References

URL

Tags

https://www.facebook.com/security/advisories/cve-…

x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Meta	Tacquito	Affected: 0 , < 07b49d1358e6ec0b5aa482fcd284f509191119e2 (git)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:facebook:tacquito:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "tacquito",
            "vendor": "facebook",
            "versions": [
              {
                "lessThan": "07b49d1358e6ec0b5aa482fcd284f509191119e2",
                "status": "affected",
                "version": "0",
                "versionType": "git"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-49400",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-01T18:32:45.694918Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-01T18:35:40.761Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tacquito",
          "vendor": "Meta",
          "versions": [
            {
              "lessThan": "07b49d1358e6ec0b5aa482fcd284f509191119e2",
              "status": "affected",
              "version": "0",
              "versionType": "git"
            }
          ]
        }
      ],
      "dateAssigned": "2024-10-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended to require a match on the entire string, but instead only enforced a match on a sub-string. That would have potentially allowed unauthorized commands to be executed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Permissive Regular Expression (CWE-625)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-17T17:15:17.191Z",
        "orgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827",
        "shortName": "facebook"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.facebook.com/security/advisories/cve-2024-49400"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827",
    "assignerShortName": "facebook",
    "cveId": "CVE-2024-49400",
    "datePublished": "2024-10-17T17:15:17.191Z",
    "dateReserved": "2024-10-15T01:05:31.784Z",
    "dateUpdated": "2024-11-01T18:35:40.761Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-49400\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-11-01T18:32:45.694918Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:facebook:tacquito:*:*:*:*:*:*:*:*\"], \"vendor\": \"facebook\", \"product\": \"tacquito\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"07b49d1358e6ec0b5aa482fcd284f509191119e2\", \"versionType\": \"git\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-17T20:44:09.879Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Meta\", \"product\": \"Tacquito\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"07b49d1358e6ec0b5aa482fcd284f509191119e2\", \"versionType\": \"git\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.facebook.com/security/advisories/cve-2024-49400\", \"tags\": [\"x_refsource_CONFIRM\"]}], \"dateAssigned\": \"2024-10-14T00:00:00\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended to require a match on the entire string, but instead only enforced a match on a sub-string. That would have potentially allowed unauthorized commands to be executed.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"Permissive Regular Expression (CWE-625)\"}]}], \"providerMetadata\": {\"orgId\": \"4fc57720-52fe-4431-a0fb-3d2c8747b827\", \"shortName\": \"facebook\", \"dateUpdated\": \"2024-10-17T17:15:17.191Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-49400\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-11-01T18:35:40.761Z\", \"dateReserved\": \"2024-10-15T01:05:31.784Z\", \"assignerOrgId\": \"4fc57720-52fe-4431-a0fb-3d2c8747b827\", \"datePublished\": \"2024-10-17T17:15:17.191Z\", \"assignerShortName\": \"facebook\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CNVD-2024-41688

Vulnerability from cnvd - Published: 2024-10-25

Title

Taquito命令执行漏洞

Description

Taquito是ECAD开源的一个快速轻量级的TypeScript库。 Taquito存在命令执行漏洞，该漏洞源于未正确执行授权命令和参数的正则表达式匹配，攻击者可利用该漏洞执行未经授权的命令。

Severity

高

Patch Name

Taquito命令执行漏洞的补丁

Patch Description

Taquito是ECAD开源的一个快速轻量级的TypeScript库。 Taquito存在命令执行漏洞，该漏洞源于未正确执行授权命令和参数的正则表达式匹配，攻击者可利用该漏洞执行未经授权的命令。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已提供漏洞修补方案，请关注厂商主页及时更新： https://github.com/ecadlabs/taquito

Reference

https://cxsecurity.com/cveshow/CVE-2024-49400/

Impacted products

Name
Taquito Taquito

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-49400"
    }
  },
  "description": "Taquito\u662fECAD\u5f00\u6e90\u7684\u4e00\u4e2a\u5feb\u901f\u8f7b\u91cf\u7ea7\u7684TypeScript\u5e93\u3002\n\nTaquito\u5b58\u5728\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u672a\u6b63\u786e\u6267\u884c\u6388\u6743\u547d\u4ee4\u548c\u53c2\u6570\u7684\u6b63\u5219\u8868\u8fbe\u5f0f\u5339\u914d\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u672a\u7ecf\u6388\u6743\u7684\u547d\u4ee4\u3002",
  "formalWay": "\u5382\u5546\u5df2\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u8865\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u53ca\u65f6\u66f4\u65b0\uff1a\r\nhttps://github.com/ecadlabs/taquito",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-41688",
  "openTime": "2024-10-25",
  "patchDescription": "Taquito\u662fECAD\u5f00\u6e90\u7684\u4e00\u4e2a\u5feb\u901f\u8f7b\u91cf\u7ea7\u7684TypeScript\u5e93\u3002\r\n\r\nTaquito\u5b58\u5728\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u672a\u6b63\u786e\u6267\u884c\u6388\u6743\u547d\u4ee4\u548c\u53c2\u6570\u7684\u6b63\u5219\u8868\u8fbe\u5f0f\u5339\u914d\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u672a\u7ecf\u6388\u6743\u7684\u547d\u4ee4\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Taquito\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Taquito Taquito"
  },
  "referenceLink": "https://cxsecurity.com/cveshow/CVE-2024-49400/",
  "serverity": "\u9ad8",
  "submitTime": "2024-10-21",
  "title": "Taquito\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e"
}

FKIE_CVE-2024-49400

Vulnerability from fkie_nvd - Published: 2024-10-17 18:15 - Updated: 2024-11-01 19:35

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	cve-assign@fb.com	https://www.facebook.com/security/advisories/cve-2024-49400

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended to require a match on the entire string, but instead only enforced a match on a sub-string. That would have potentially allowed unauthorized commands to be executed."
    },
    {
      "lang": "es",
      "value": "Antes de el commit 07b49d1358e6ec0b5aa482fcd284f509191119e2, Tacquito no realizaba correctamente las coincidencias de expresiones regulares en los comandos y argumentos autorizados. Los comandos y argumentos permitidos configurados ten\u00edan como objetivo exigir una coincidencia en toda la cadena, pero en su lugar solo aplicaban una coincidencia en una subcadena. Eso podr\u00eda haber permitido la ejecuci\u00f3n de comandos no autorizados."
    }
  ],
  "id": "CVE-2024-49400",
  "lastModified": "2024-11-01T19:35:28.673",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-10-17T18:15:15.547",
  "references": [
    {
      "source": "cve-assign@fb.com",
      "url": "https://www.facebook.com/security/advisories/cve-2024-49400"
    }
  ],
  "sourceIdentifier": "cve-assign@fb.com",
  "vulnStatus": "Awaiting Analysis"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-49400 (GCVE-0-2024-49400)

CNVD-2024-41688

FKIE_CVE-2024-49400

Tags

Sightings

Nomenclature