CVE-2019-13020

{"id": "CVE-2019-13020", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 10.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 3.9}]}, "published": "2019-08-26T18:15:11.857", "references": [{"url": "https://www.carouselsignage.com/release-notes/carousel-7-1-3", "tags": ["Release Notes"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF. This has two potential areas for abuse. First, a specially crafted URL could be used in a phishing attack to hijack the trust the user and the browser have with the website and could serve malicious content from a third-party attacker-controlled system. Second, arguably more severe, is the potential for an attacker to circumvent firewall controls, by proxying traffic, unauthenticated, into the internal network from the internet."}, {"lang": "es", "value": "La API fetch en Tightrope Media Carousel versiones anteriores a la 7.1.3 tiene CarouselAPI/v0/fetch?url- SSRF. Esto tiene dos \u00e1reas potenciales de abuso. En primer lugar, una URL especialmente dise\u00f1ada podr\u00eda ser utilizado en un ataque de phishing para secuestrar la confianza que el usuario y el navegador tienen con el sitio web y podr\u00eda servir contenido malicioso de un sistema controlado por atacantes de terceros. En segundo lugar, posiblemente m\u00e1s grave, es la posibilidad de que un atacante eluda los controles del cortafuegos, mediante el proxy de tr\u00e1fico, no autenticado, en la red interna desde Internet."}], "lastModified": "2019-09-06T17:54:03.430", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:trms:tightrope_media_carousel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B18884A-1165-4E10-BE5D-DCF0C89D94AC", "versionEndExcluding": "7.1.3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}