CVE-2018-20744

The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.

CVSS v3 5.9 MEDIUM
CVSS v2.0 4.3 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/bid/106834	Third Party Advisory
https://github.com/rs/cors/issues/55	Issue Tracking Third Party Advisory
https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-chen.pdf	Third Party Advisory
http://www.securityfocus.com/bid/106834	Third Party Advisory
https://github.com/rs/cors/issues/55	Issue Tracking Third Party Advisory
https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-chen.pdf	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:go_cors_project:go_cors:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-01-28 08:29

Updated : 2024-11-21 04:02

NVD link : CVE-2018-20744

Mitre link : CVE-2018-20744

CVE.ORG link : CVE-2018-20744

JSON object : View

Products Affected

go_cors_project

go_cors

CWE

CWE-346

Origin Validation Error

{"id": "CVE-2018-20744", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "published": "2019-01-28T08:29:00.230", "references": [{"url": "http://www.securityfocus.com/bid/106834", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/rs/cors/issues/55", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-chen.pdf", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/106834", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/rs/cors/issues/55", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-chen.pdf", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-346"}]}], "descriptions": [{"lang": "en", "value": "The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems."}, {"lang": "es", "value": "El gestor Go CORS, de Olivier Poitrey, hasta la versi\u00f3n 1.3.0, convierte de manera activa una pol\u00edtica comod\u00edn de CORS para que refleje un valor arbitrario de la cabecera Origin, que no es compatible con el dise\u00f1o de seguridad de CORS y podr\u00eda conducir a problemas de mala configuraci\u00f3n de seguridad de CORS."}], "lastModified": "2024-11-21T04:02:04.660", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:go_cors_project:go_cors:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83CDD84E-E81F-4256-B707-55259AD874F6", "versionEndIncluding": "1.3.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}