CVE-2024-42366

VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-permission and cross-site scripting via overlay notification can be combined to result in remote command execution. These vulnerabilities are patched in VRCX 2023.12.24. In addition to the patch, VRCX maintainers worked with the VRC team and blocked the older version of VRCX on the VRC's API side. Users who use the older version of VRCX must update their installation to continue using VRCX.

CVSS v3 9.0 CRITICAL

9.0^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.3 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/vrcx-team/VRCX/commit/cd2387aa3289f936ce60049121c24b0765bd4180	Patch
https://github.com/vrcx-team/VRCX/security/advisories/GHSA-j98g-mgjm-wqph	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:vrcx-team:vrcx:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-08-08 17:15

Updated : 2024-08-29 14:04

NVD link : CVE-2024-42366

Mitre link : CVE-2024-42366

CVE.ORG link : CVE-2024-42366

JSON object : View

Products Affected

vrcx-team

vrcx

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-269

Improper Privilege Management

{"id": "CVE-2024-42366", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}]}, "published": "2024-08-08T17:15:19.590", "references": [{"url": "https://github.com/vrcx-team/VRCX/commit/cd2387aa3289f936ce60049121c24b0765bd4180", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/vrcx-team/VRCX/security/advisories/GHSA-j98g-mgjm-wqph", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-79"}, {"lang": "en", "value": "CWE-269"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-permission and cross-site scripting via overlay notification can be combined to result in remote command execution. These vulnerabilities are patched in VRCX 2023.12.24. In addition to the patch, VRCX maintainers worked with the VRC team and blocked the older version of VRCX on the VRC's API side. Users who use the older version of VRCX must update their installation to continue using VRCX."}, {"lang": "es", "value": "VRCX es una aplicaci\u00f3n asistente/complementaria para VRChat. En versiones anteriores a la 2024.03.23, se puede combinar un navegador CefSharp con permisos excesivos y cross-site scripting mediante notificaci\u00f3n superpuesta para dar como resultado la ejecuci\u00f3n remota de comandos. Estas vulnerabilidades est\u00e1n parcheadas en VRCX 2023.12.24. Adem\u00e1s del parche, los fabricantes de VRCX trabajaron con el equipo de VRC y bloquearon la versi\u00f3n anterior de VRCX en el lado API de VRC. Los usuarios que usan la versi\u00f3n anterior de VRCX deben actualizar su instalaci\u00f3n para continuar usando VRCX."}], "lastModified": "2024-08-29T14:04:30.733", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vrcx-team:vrcx:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62785625-0284-4269-80FD-E36F60B41933", "versionEndExcluding": "2024.03.23"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}