by Kastro
Paper/Archive/CVE-2023-27584

CVE-2023-27584

dragonflyoss Dragonfly2 — Dragonfly2 vulnerable to hard coded cyptographic key

EPSS 34%public exploitCVSS 9.8
critical.is priorityof 100
59
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 98.4.984 × 2019.7Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation (CNCF) as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to authentication bypass. An attacker can perform any action as a user with admin privileges. This issue has been addressed in release version 2.0.9. All users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected

ProductAffectedFixed inSource
Dragonfly2< 2.0.9–CNA
dragonfly2< 2.0.92.0.9CISA-ADP

Scores by source

GitHub_M (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refgithub.com/dragonflyoss/Dragonfly2/security/advisories/GHSA-hpc8-7wpm-889wrefgithub.com/dragonflyoss/Dragonfly2/releases/tag/v2.0.9