CVE-2019-10790

Aliases:GHSA-mxhp-79qh-mcx6
Advisory lineage Upstream: 0 Downstream: 1
Downstream
RHSA-2026:2711
Modified
Published: 17 Feb 2020, 00:00
Last modified:04 Aug 2024, 22:32

Vulnerability Summary

Overall Risk (default)
medium
40/100
CVSS Score
7.5 HIGH
v3.1 (nvd)
EPSS Score
0.39% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

17 Feb 2020, 00:00
Published
Vulnerability first disclosed
04 Aug 2024, 22:32
Last Modified
Vulnerability information updated

Description

taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB. taffy sets an internal index for each data item in its DB. However, it is found that the internal index can be forged by adding additional properties into user-input. If index is found in the query, taffyDB will ignore other query conditions and directly return the indexed data item. Moreover, the internal index is in an easily-guessable format (e.g., T000002R000001). As such, attackers can use this vulnerability to access any data items in the DB.

CVSS Metrics

  • v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
  • v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS Trends

Current EPSS score: 0.39%• Percentile: 61%

Techniques & Countermeasures

  • CWE-668•Exposure of Resource to Wrong Sphere

    The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

Affected Systems

  • Npm•taffy

    ≤ 2.6.2

  • Npm•taffydb

    ≤ 2.7.3

  • taffydb•taffy

    ≤ 2.6.2

References (5)