{"containers": {"cna": {"affected": [{"product": "chat-server", "vendor": "ramank775", "versions": [{"status": "affected", "version": ">= 2.3.2, < 2.6.0"}]}], "descriptions": [{"lang": "en", "value": "Chat Server is the chat server for Vartalap, an open-source messaging application. Versions 2.3.2 until 2.6.0 suffer from a bug in validating the access token, resulting in authentication bypass. The function `this.authProvider.verifyAccessKey` is an async function, as the code is not using `await` to wait for the verification result. Every time the function responds back with success, along with an unhandled exception if the token is invalid. A patch is available in version 2.6.0."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-287", "description": "CWE-287: Improper Authentication", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-05-31T22:35:11", "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ramank775/chat-server/security/advisories/GHSA-xx4j-qqpp-v277"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/ramank775/chat-server/discussions/78"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/ramank775/chat-server/releases/tag/v2.6.0"}], "source": {"advisory": "GHSA-xx4j-qqpp-v277", "discovery": "UNKNOWN"}, "title": "Authentication bypass in Vartalap chat-server", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security-advisories@github.com", "ID": "CVE-2022-31013", "STATE": "PUBLIC", "TITLE": "Authentication bypass in Vartalap chat-server"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "chat-server", "version": {"version_data": [{"version_value": ">= 2.3.2, < 2.6.0"}]}}]}, "vendor_name": "ramank775"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Chat Server is the chat server for Vartalap, an open-source messaging application. Versions 2.3.2 until 2.6.0 suffer from a bug in validating the access token, resulting in authentication bypass. The function `this.authProvider.verifyAccessKey` is an async function, as the code is not using `await` to wait for the verification result. Every time the function responds back with success, along with an unhandled exception if the token is invalid. A patch is available in version 2.6.0."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-287: Improper Authentication"}]}]}, "references": {"reference_data": [{"name": "https://github.com/ramank775/chat-server/security/advisories/GHSA-xx4j-qqpp-v277", "refsource": "CONFIRM", "url": "https://github.com/ramank775/chat-server/security/advisories/GHSA-xx4j-qqpp-v277"}, {"name": "https://github.com/ramank775/chat-server/discussions/78", "refsource": "MISC", "url": "https://github.com/ramank775/chat-server/discussions/78"}, {"name": "https://github.com/ramank775/chat-server/releases/tag/v2.6.0", "refsource": "MISC", "url": "https://github.com/ramank775/chat-server/releases/tag/v2.6.0"}]}, "source": {"advisory": "GHSA-xx4j-qqpp-v277", "discovery": "UNKNOWN"}}}}, "cveMetadata": {"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "cveId": "CVE-2022-31013", "datePublished": "2022-05-31T22:35:11", "dateReserved": "2022-05-18T00:00:00", "dateUpdated": "2022-05-31T22:35:11", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:chat_server_project:chat_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "188945D9-7BE7-4077-AB71-CEE8CD01B974", "versionEndExcluding": "2.6.0", "versionStartIncluding": "2.3.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Chat Server is the chat server for Vartalap, an open-source messaging application. Versions 2.3.2 until 2.6.0 suffer from a bug in validating the access token, resulting in authentication bypass. The function `this.authProvider.verifyAccessKey` is an async function, as the code is not using `await` to wait for the verification result. Every time the function responds back with success, along with an unhandled exception if the token is invalid. A patch is available in version 2.6.0."}, {"lang": "es", "value": "Chat Server es el servidor de chat de Vartalap, una aplicaci\u00f3n de mensajer\u00eda de c\u00f3digo abierto. Las versiones 2.3.2 hasta 2.6.0, sufren de un error en la comprobaci\u00f3n del token de acceso, resultando en una omisi\u00f3n de autenticaci\u00f3n. La funci\u00f3n \"this.authProvider.verifyAccessKey\" es una funci\u00f3n as\u00edncrona, ya que el c\u00f3digo no usa \"await\" para esperar el resultado de la verificaci\u00f3n. Cada vez que la funci\u00f3n responde con \u00e9xito, junto con una excepci\u00f3n no manejada si el token es inv\u00e1lido. Se presenta un parche disponible en la versi\u00f3n 2.6.0"}], "id": "CVE-2022-31013", "lastModified": "2022-06-14T22:33:06.253", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2022-05-31T23:15:07.897", "references": [{"source": "security-advisories@github.com", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://github.com/ramank775/chat-server/discussions/78"}, {"source": "security-advisories@github.com", "tags": ["Release Notes", "Third Party Advisory"], "url": "https://github.com/ramank775/chat-server/releases/tag/v2.6.0"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/ramank775/chat-server/security/advisories/GHSA-xx4j-qqpp-v277"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-287"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}