CVE-2022-41874
Tauri Incorrectly-Resolved Path Escaping_ALLOWED Folder Bypass
Description
Tauri is a framework for building binaries for all major desktop platforms. In versions prior to 1.0.7 and 1.1.2, Tauri is vulnerable to an Incorrectly-Resolved Name. Due to incorrect escaping of special characters in paths selected via the file dialog and drag and drop functionality, it is possible to partially bypass the `fs` scope definition. It is not possible to traverse into arbitrary paths, as the issue is limited to neighboring files and sub folders of already allowed paths. The impact differs on Windows, MacOS and Linux due to different specifications of valid path characters. This bypass depends on the file picker dialog or dragged files, as user selected paths are automatically added to the allow list at runtime. A successful bypass requires the user to select a pre-existing malicious file or directory during the file picker dialog and an adversary controlled logic to access these files. The issue has been patched in versions 1.0.7, 1.1.2 and 1.2.0. As a workaround, disable the dialog and fileDropEnabled component inside the tauri.conf.json.
INFO
Published Date :
Nov. 10, 2022, 9:15 p.m.
Last Modified :
Nov. 21, 2024, 7:23 a.m.
Source :
[email protected]
Remotely Exploitable :
Yes !
Impact Score :
1.4
Exploitability Score :
2.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2022-41874.
| URL | Resource |
|---|---|
| https://github.com/tauri-apps/tauri/security/advisories/GHSA-q9wv-22m9-vhqh | Issue Tracking Patch Third Party Advisory |
| https://github.com/tauri-apps/tauri/security/advisories/GHSA-q9wv-22m9-vhqh | Issue Tracking Patch Third Party Advisory |
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2022-41874 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2022-41874 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://github.com/tauri-apps/tauri/security/advisories/GHSA-q9wv-22m9-vhqh -
CVE Modified by [email protected]
May. 14, 2024
Action Type Old Value New Value -
Initial Analysis by [email protected]
Nov. 15, 2022
Action Type Old Value New Value Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N Changed Reference Type https://github.com/tauri-apps/tauri/security/advisories/GHSA-q9wv-22m9-vhqh No Types Assigned https://github.com/tauri-apps/tauri/security/advisories/GHSA-q9wv-22m9-vhqh Issue Tracking, Patch, Third Party Advisory Added CWE NIST CWE-706 Added CPE Configuration OR *cpe:2.3:a:tauri:tauri:*:*:*:*:*:*:*:* versions from (including) 1.0.0 up to (excluding) 1.0.7 *cpe:2.3:a:tauri:tauri:*:*:*:*:*:*:*:* versions from (including) 1.1.0 up to (excluding) 1.1.2
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2022-41874 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2022-41874
weaknesses.
Exploit Prediction
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.
0.04 }} -0.03%
score
0.08618
percentile