by Kastro
Paper/Archive/CVE-2024-47830

CVE-2024-47830

makeplane plane — Plane allows server side request forgery via /_next/image endpoint

EPSS 0.6%public exploitCVSS 9.3
critical.is priorityof 100
47
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 47.4.474 × 209.5Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Plane is an open-source project management tool. Plane uses the ** wildcard support to retrieve the image from any hostname as in /web/next.config.js. This may permit an attacker to induce the server side into performing requests to unintended locations. This vulnerability is fixed in 0.23.0.

Affected

ProductAffectedFixed inSource
plane< 0.23.0–CNA
plane< 0.23.00.23.0CISA-ADP

Scores by source

GitHub_M (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refgithub.com/makeplane/plane/security/advisories/GHSA-39gx-38xf-c348refgithub.com/makeplane/plane/commit/b9f78ba42b70461c8c1d26638fa8b9beef6a96a1