CVE-2024-24818 - Vulnerability Details - OpenCVE

EspoCRM is an Open Source Customer Relationship Management software. An attacker can inject arbitrary IP or domain in "Password Change" page and redirect victim to malicious page that could lead to credential stealing or another attack. This vulnerability is fixed in 8.1.2.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact Low

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://github.com/espocrm/espocrm/commit/3babdfa3399e328fb1bd83a1b4ed03d509f4c8e7
https://github.com/espocrm/espocrm/security/advisories/GHSA-8gv6-8r33-fm7j

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2024-02-29T15:17:16.859Z

Updated: 2024-08-05T17:15:03.682Z

Reserved: 2024-01-31T16:28:17.942Z

Link: CVE-2024-24818

Vulnrichment

Updated: 2024-08-01T23:28:12.614Z

NVD

Status : Awaiting Analysis

Published: 2024-03-21T02:52:12.073

Modified: 2024-11-21T08:59:46.770

Link: CVE-2024-24818

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-24818", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2024-01-31T16:28:17.942Z", "datePublished": "2024-02-29T15:17:16.859Z", "dateUpdated": "2024-08-05T17:15:03.682Z"}, "containers": {"cna": {"title": "EspoCRM weakness in \"Forgot password\"", "problemTypes": [{"descriptions": [{"cweId": "CWE-610", "lang": "en", "description": "CWE-610: Externally Controlled Reference to a Resource in Another Sphere", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/espocrm/espocrm/security/advisories/GHSA-8gv6-8r33-fm7j", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/espocrm/espocrm/security/advisories/GHSA-8gv6-8r33-fm7j"}, {"name": "https://github.com/espocrm/espocrm/commit/3babdfa3399e328fb1bd83a1b4ed03d509f4c8e7", "tags": ["x_refsource_MISC"], "url": "https://github.com/espocrm/espocrm/commit/3babdfa3399e328fb1bd83a1b4ed03d509f4c8e7"}], "affected": [{"vendor": "espocrm", "product": "espocrm", "versions": [{"version": "< 8.1.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-02-29T15:17:16.859Z"}, "descriptions": [{"lang": "en", "value": "EspoCRM is an Open Source Customer Relationship Management software. An attacker can inject arbitrary IP or domain in \"Password Change\" page and redirect victim to malicious page that could lead to credential stealing or another attack. This vulnerability is fixed in 8.1.2."}], "source": {"advisory": "GHSA-8gv6-8r33-fm7j", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:28:12.614Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/espocrm/espocrm/security/advisories/GHSA-8gv6-8r33-fm7j", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/espocrm/espocrm/security/advisories/GHSA-8gv6-8r33-fm7j"}, {"name": "https://github.com/espocrm/espocrm/commit/3babdfa3399e328fb1bd83a1b4ed03d509f4c8e7", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/espocrm/espocrm/commit/3babdfa3399e328fb1bd83a1b4ed03d509f4c8e7"}]}, {"affected": [{"vendor": "espocrm", "product": "espocrm", "cpes": ["cpe:2.3:a:espocrm:espocrm:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "8.1.2", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-05T17:13:07.854434Z", "id": "CVE-2024-24818", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-05T17:15:03.682Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/espocrm/espocrm/security/advisories/GHSA-8gv6-8r33-fm7j", "name": "https://github.com/espocrm/espocrm/security/advisories/GHSA-8gv6-8r33-fm7j", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://github.com/espocrm/espocrm/commit/3babdfa3399e328fb1bd83a1b4ed03d509f4c8e7", "name": "https://github.com/espocrm/espocrm/commit/3babdfa3399e328fb1bd83a1b4ed03d509f4c8e7", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:28:12.614Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-24818", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-05T17:13:07.854434Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:espocrm:espocrm:-:*:*:*:*:*:*:*"], "vendor": "espocrm", "product": "espocrm", "versions": [{"status": "affected", "version": "0", "lessThan": "8.1.2", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-05T17:14:55.382Z"}}], "cna": {"title": "EspoCRM weakness in \"Forgot password\"", "source": {"advisory": "GHSA-8gv6-8r33-fm7j", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "espocrm", "product": "espocrm", "versions": [{"status": "affected", "version": "< 8.1.2"}]}], "references": [{"url": "https://github.com/espocrm/espocrm/security/advisories/GHSA-8gv6-8r33-fm7j", "name": "https://github.com/espocrm/espocrm/security/advisories/GHSA-8gv6-8r33-fm7j", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/espocrm/espocrm/commit/3babdfa3399e328fb1bd83a1b4ed03d509f4c8e7", "name": "https://github.com/espocrm/espocrm/commit/3babdfa3399e328fb1bd83a1b4ed03d509f4c8e7", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "EspoCRM is an Open Source Customer Relationship Management software. An attacker can inject arbitrary IP or domain in \"Password Change\" page and redirect victim to malicious page that could lead to credential stealing or another attack. This vulnerability is fixed in 8.1.2."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-610", "description": "CWE-610: Externally Controlled Reference to a Resource in Another Sphere"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-02-29T15:17:16.859Z"}}}, "cveMetadata": {"cveId": "CVE-2024-24818", "state": "PUBLISHED", "dateUpdated": "2024-08-05T17:15:03.682Z", "dateReserved": "2024-01-31T16:28:17.942Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-02-29T15:17:16.859Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}