CVE-2022-25237

CRITICALNuclei

Bonita Web RestAPIAuthorizationFilter Authentication Bypass Vulnerability

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-25237 has a selected CVSS score of 9.8 (critical); EIP currently links 1 curated repository PoC and 1 Nuclei template.

Description

Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFilter. By appending ;i18ntranslation or /../i18ntranslation/ to the end of a URL, users with no privileges can access privileged API endpoints. This can lead to remote code execution by abusing the privileged API actions.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · May 15, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Curated repository PoCs
1
Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

bonita_web

Browse bonitasoft / bonita_web
VulnCheckVersion data not supplied

Proofs of concept

1

Curated repository PoCs

GitHubCVE-2022-25237Curated repository PoCby RhinoSecurityLabs905Not analyzed4 files

Python · 87.6 KiB

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryCRITICALBonita Web 2021.2 - Authentication/Authorization BypassCVSS 9.8

Bonita Web 2021.2 contains an authentication/authorization bypass vulnerability caused by an overly broad exclude pattern in RestAPIAuthorizationFilter, allowing unauthenticated users to access privileged API endpoints by appending ;i18ntranslation or /../i18ntranslation/ to the URL.

Impact

Successful exploitation allows unauthenticated attackers to access privileged API endpoints and potentially upload files to the server.

Remediation

Update Bonita Web to the latest version that addresses this vulnerability or implement proper access controls to restrict unauthorized API access.

WeaknessesCWE-285
AuthorsSourabh-Sahu
Template tagscvecve2022bonitaauth-bypassintrusivefile-uploadrcevkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:bonitasoft:bonita:2021.2:*:*:*:*:*:*:*
Shodan: http.title:"Bonita" || "Server: Bonita"
FOFA: title="Bonita" || header="Server: Bonita"
https://nvd.nist.gov/vuln/detail/CVE-2022-25237 https://rhinosecuritylabs.com/application-security/cve-2022-25237-bonitasoft-authorization-bypass/ https://bonitasoft.com/

Source: ProjectDiscovery

References

3