{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"cveId": "CVE-2023-40168", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2023-08-09T15:26:41.051Z", "datePublished": "2023-08-17T19:05:18.113Z", "dateUpdated": "2023-08-17T19:05:18.113Z"}, "containers": {"cna": {"title": "Malicious projects can read and upload arbitrary files from disk in TurboWarp Desktop", "problemTypes": [{"descriptions": [{"cweId": "CWE-863", "lang": "en", "description": "CWE-863: Incorrect Authorization", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/TurboWarp/desktop/security/advisories/GHSA-wg4p-vj7h-q82q", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/TurboWarp/desktop/security/advisories/GHSA-wg4p-vj7h-q82q"}, {"name": "https://github.com/TurboWarp/desktop/commit/55e07e99b59db334d75e8f46792a1569ab0884a6", "tags": ["x_refsource_MISC"], "url": "https://github.com/TurboWarp/desktop/commit/55e07e99b59db334d75e8f46792a1569ab0884a6"}, {"name": "https://github.com/TurboWarp/desktop/commit/a62dbd7a28b41857e3b6f32443fda0527d493267", "tags": ["x_refsource_MISC"], "url": "https://github.com/TurboWarp/desktop/commit/a62dbd7a28b41857e3b6f32443fda0527d493267"}, {"name": "https://github.com/TurboWarp/desktop/commit/f0f82aaf6cc8170e9da8b36953c98bfe533c019f", "tags": ["x_refsource_MISC"], "url": "https://github.com/TurboWarp/desktop/commit/f0f82aaf6cc8170e9da8b36953c98bfe533c019f"}], "affected": [{"vendor": "TurboWarp", "product": "desktop", "versions": [{"version": "< 1.8.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-08-17T19:05:18.113Z"}, "descriptions": [{"lang": "en", "value": "TurboWarp is a desktop application that compiles scratch projects to JavaScript. TurboWarp Desktop versions prior to version 1.8.0 allowed a malicious project or custom extension to read arbitrary files from disk and upload them to a remote server. The only required user interaction is opening the sb3 file or loading the extension. The web version of TurboWarp is not affected. This bug has been addressed in commit `55e07e99b59` after an initial fix which was reverted. Users are advised to upgrade to version 1.8.0 or later. Users unable to upgrade should avoid opening sb3 files or loading extensions from untrusted sources."}], "source": {"advisory": "GHSA-wg4p-vj7h-q82q", "discovery": "UNKNOWN"}}}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:turbowarp:turbowarp_desktop:*:*:*:*:*:*:*:*", "matchCriteriaId": "DC0B20C6-3805-4C2E-B055-322AB6EABD32", "versionEndExcluding": "1.8.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "TurboWarp is a desktop application that compiles scratch projects to JavaScript. TurboWarp Desktop versions prior to version 1.8.0 allowed a malicious project or custom extension to read arbitrary files from disk and upload them to a remote server. The only required user interaction is opening the sb3 file or loading the extension. The web version of TurboWarp is not affected. This bug has been addressed in commit `55e07e99b59` after an initial fix which was reverted. Users are advised to upgrade to version 1.8.0 or later. Users unable to upgrade should avoid opening sb3 files or loading extensions from untrusted sources."}, {"lang": "es", "value": "TurboWarp es una aplicaci\u00f3n de escritorio que compila proyectos scratch a JavaScript. Las versiones de TurboWarp Desktop anteriores a la versi\u00f3n 1.8.0 permit\u00edan que un proyecto malicioso o una extensi\u00f3n personalizada leyeran archivos arbitrarios del disco y los cargaran en un servidor remoto. La \u00fanica interacci\u00f3n requerida del usuario es abrir el archivo sb3 o cargar la extensi\u00f3n. La versi\u00f3n web de TurboWarp no est\u00e1 afectada. Este error ha sido corregido en el commit `55e07e99b59` despu\u00e9s de una correcci\u00f3n inicial que fue revertida. Se recomienda a los usuarios actualizar a la versi\u00f3n 1.8.0 o posterior. Los usuarios que no puedan actualizarse deben evitar abrir archivos sb3 o cargar extensiones de fuentes no fiables."}], "id": "CVE-2023-40168", "lastModified": "2023-08-24T15:04:49.430", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 4.0, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2023-08-17T20:15:11.190", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/TurboWarp/desktop/commit/55e07e99b59db334d75e8f46792a1569ab0884a6"}, {"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/TurboWarp/desktop/commit/a62dbd7a28b41857e3b6f32443fda0527d493267"}, {"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/TurboWarp/desktop/commit/f0f82aaf6cc8170e9da8b36953c98bfe533c019f"}, {"source": "security-advisories@github.com", "tags": ["Mitigation", "Patch", "Vendor Advisory"], "url": "https://github.com/TurboWarp/desktop/security/advisories/GHSA-wg4p-vj7h-q82q"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "security-advisories@github.com", "type": "Primary"}]}

{}