CVE-2023-49094

Symbolicator is a symbolication service for native stacktraces and minidumps with symbol server support. An attacker could make Symbolicator send arbitrary GET HTTP requests to internal IP addresses by using a specially crafted HTTP endpoint. The response could be reflected to the attacker if they have an account on Sentry instance. The issue has been fixed in the release 23.11.2.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/getsentry/symbolicator/commit/9db2fb9197dd200d62aacebd8efef4df7678865a	Patch Vendor Advisory
https://github.com/getsentry/symbolicator/pull/1332	Vendor Advisory
https://github.com/getsentry/symbolicator/releases/tag/23.11.2	Release Notes Vendor Advisory
https://github.com/getsentry/symbolicator/security/advisories/GHSA-6576-pr6j-h9c6	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:sentry:symbolicator:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-11-30 05:15

Updated : 2023-12-12 14:55

NVD link : CVE-2023-49094

Mitre link : CVE-2023-49094

CVE.ORG link : CVE-2023-49094

JSON object : View

Products Affected

sentry

symbolicator

CWE

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2023-49094", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2023-11-30T05:15:09.123", "references": [{"url": "https://github.com/getsentry/symbolicator/commit/9db2fb9197dd200d62aacebd8efef4df7678865a", "tags": ["Patch", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/getsentry/symbolicator/pull/1332", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/getsentry/symbolicator/releases/tag/23.11.2", "tags": ["Release Notes", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/getsentry/symbolicator/security/advisories/GHSA-6576-pr6j-h9c6", "tags": ["Mitigation", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "Symbolicator is a symbolication service for native stacktraces and minidumps with symbol server support. An attacker could make Symbolicator send arbitrary GET HTTP requests to internal IP addresses by using a specially crafted HTTP endpoint. The response could be reflected to the attacker if they have an account on Sentry instance. The issue has been fixed in the release 23.11.2.\n"}, {"lang": "es", "value": "Symbolicator es un servicio de simbolizaci\u00f3n para seguimientos de pila y minivolcados nativos con soporte de servidor de s\u00edmbolos. Un atacante podr\u00eda hacer que Symbolicator env\u00ede solicitudes GET HTTP arbitrarias a direcciones IP internas mediante el uso de un endpoint HTTP especialmente manipulado. La respuesta podr\u00eda reflejarse al atacante si tiene una cuenta en la instancia Sentry. El problema se solucion\u00f3 en la versi\u00f3n 23.11.2."}], "lastModified": "2023-12-12T14:55:06.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sentry:symbolicator:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A146A56-9BF7-4D5A-B10B-791725ACC7F0", "versionEndExcluding": "23.11.2", "versionStartIncluding": "0.3.3"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}