« Volver al listado

CVE-2024-42476

Estado: AplazadaMedia (6.5)—

In the OAuth library for nim prior to version 0.11, the Authorization Code grant and Implicit grant both rely on the `state` parameter to prevent cross-site request forgery (CSRF) attacks where a resource owner might have their session associated with protected resources belonging to an attacker. When this project is compiled with certain compiler flags set, it is possible that the `state` parameter will not be checked at all, creating a CSRF vulnerability. Version 0.11 checks the `state` parameter using a regular `if` statement or `doAssert` instead of relying on a plain `assert`. `doAssert` will achieve the desired behavior even if `-d:danger` or `--assertions:off` is set.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Atlassian — OauthAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-42476",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-42476",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-08-20T15:39:46.890853Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "CORDEA",
          "product": "oauth",
          "versions": [
            {
              "status": "affected",
              "version": "< 0.11"
            }
          ]
        }
      ]
    }
  ],
  "published": "2024-08-15T19:15:19.753",
  "references": [
    {
      "url": "https://github.com/CORDEA/oauth/blob/b8c163b0d9cfad6d29ce8c1fb394e5f47182ee1c/src/oauth2.nim#L235",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/CORDEA/oauth/blob/b8c163b0d9cfad6d29ce8c1fb394e5f47182ee1c/src/oauth2.nim#L255",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/CORDEA/oauth/security/advisories/GHSA-pc9j-53g7-5x54",
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the OAuth library for nim prior to version 0.11, the Authorization Code grant and Implicit grant both rely on the `state` parameter to prevent cross-site request forgery (CSRF) attacks where a resource owner might have their session associated with protected resources belonging to an attacker. When this project is compiled with certain compiler flags set, it is possible that the `state` parameter will not be checked at all, creating a CSRF vulnerability. Version 0.11 checks the `state` parameter using a regular `if` statement or `doAssert` instead of relying on a plain `assert`. `doAssert` will achieve the desired behavior even if `-d:danger` or `--assertions:off` is set."
    },
    {
      "lang": "es",
      "value": " En la librería OAuth para nim anterior a la versión 0.11, la concesión del Código de autorización y la concesión implícita dependen del parámetro \"state\" para evitar ataques de Cross-Site Request Forgery (CSRF) en los que el propietario de un recurso podría tener su sesión asociada con recursos protegidos que pertenecen. a un atacante. Cuando este proyecto se compila con ciertos indicadores del compilador configurados, es posible que el parámetro \"state\" no se verifique en absoluto, creando una vulnerabilidad de CSRF. La versión 0.11 verifica el parámetro \"state\" usando una declaración \"if\" normal o \"doAssert\" en lugar de confiar en una simple \"assert\". `doAssert` logrará el comportamiento deseado incluso si `-d:danger` o `--assertions:off` están configurados."
    }
  ],
  "lastModified": "2026-06-17T07:49:31.563",
  "sourceIdentifier": "security-advisories@github.com"
}