One Article Review
| Source |  CVE Liste |
|---|---|
| Identifiant | 8316062 |
| Date de publication | 2023-03-06 18:15:10 (vue: 2023-03-06 20:06:59) |
| Titre | CVE-2023-22481 |
| Texte | FreshRSS is a self-hosted RSS feed aggregator. When using the greader API, the provided password is logged in clear in `users/_/log_api.txt` in the case where the authentication fails. The issues occurs in `authorizationToUser()` in `greader.php`. If there is an issue with the request or the credentials, `unauthorized()` or `badRequest()` is called. Both these functions are printing the return of `debugInfo()` in the logs. `debugInfo()` will return the content of the request. By default, this will be saved in `users/_/log_api.txt` and if the const `COPY_LOG_TO_SYSLOG` is true, in syslogs as well. Exploiting this issue requires having access to logs produced by FreshRSS. Using the information from the logs, a malicious individual could get users' API keys (would be displayed if the users fills in a bad username) or passwords. |
| Envoyé | Oui |
| Condensat | /log 2023 22481 `authorizationtouser `badrequest `copy `debuginfo `greader `unauthorized `users/ access aggregator api are authentication bad both called case clear const content could credentials cve default displayed exploiting fails feed fills freshrss from functions get greader having hosted individual information issue issues keys log logged logs malicious occurs password passwords php` printing produced provided request requires return rss saved self syslog` syslogs these true txt` username users using well when where will would |
| Tags | |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.