Description

The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict callback values, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and obtain sensitive information, via a crafted HTTP request.

Remediation

References

https://github.com/orientechnologies/orientdb/issues/4824

https://www.kb.cert.org/vuls/id/845332

Related Vulnerabilities

CVE-2019-5786 Vulnerability in npm package electron

CVE-2022-1330 Vulnerability in maven package org.webjars.bowergithub.alvarotrigo:fullpage.js

CVE-2020-24590 Vulnerability in maven package org.wso2.carbon.governance:org.wso2.carbon.governance.generic.ui

CVE-2023-29014 Vulnerability in maven package io.goobi.viewer:viewer-core

CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-beam

Severity

Critical

Classification

CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Vendor Advisory Third Party Advisory US Government Resource