github.com
https://github.com/widgetti/solara CVE-2024-39903
HIGHNuclei
Local File Inclusion in Solara
Record summary
CVE-2024-39903 has a selected CVSS score of 8.6 (high); EIP currently links 1 Nuclei template.
Description
Solara is a pure Python, React-style framework for scaling Jupyter and web apps. A Local File Inclusion (LFI) vulnerability was identified in widgetti/solara, in version <1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. An attacker can exploit this flaw by manipulating the fragment part of the URI to read arbitrary files on the local file system.
Description source: CVE List
Exploitation context
Available material
- Nuclei templates
- 1
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 15, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
solaraBrowse widgetti / solaraDefault status: unknown | CVE List | Before 1.35.1 | affected |
| < 1.35.1 | affected | ||
solaraBrowse PyPI / solara | GitHub Advisory | Before 1.35.1 · Fixed in 1.35.1 | affected |
Nuclei templates
1ProjectDiscoveryHIGHSolara <1.35.1 - Local File InclusionCVSS 8.6
A Local File Inclusion (LFI) vulnerability was identified in widgetti/solara, in version <1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. An attacker can exploit this flaw by manipulating the fragment part of the URI to read arbitrary files on the local file system.
Impact
Unauthenticated attackers can exploit LFI to read arbitrary files from the local filesystem.
Remediation
Update Solara to version 1.35.1 or later.
WeaknessesCWE-22
Authorsiamnoooob, rootxharsh, pdresearch
Template tagscvecve2024solaralfivuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
FOFA: icon_hash="-223126228"
https://nvd.nist.gov/vuln/detail/CVE-2024-39903 https://github.com/widgetti/solara/commit/df2fd66a7f4e8ffd36e8678697a8a4f76760dc54 https://github.com/widgetti/solara/security/advisories/GHSA-9794-pc4r-438w
Source: ProjectDiscovery
References
4github.com
https://github.com/widgetti/solara/commit/df2fd66a7f4e8ffd36e8678697a8a4f76760dc54 github.comConfirmation
https://github.com/widgetti/solara/security/advisories/GHSA-9794-pc4r-438w nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-39903