Vulnerability-Lookup

CNVD-2018-04095

Vulnerability from cnvd - Published: 2018-03-02

Title

Paritytech Parity绕过同源策略漏洞

Description

Parity Browser是一款轻量级的快速Ethereum（编程语言）客户端。 Parity Browser 1.6.10及之前的版本中存在安全漏洞。远程攻击者可通过借助奇偶校验位Web代理引擎请求其他网站利用该漏洞获取敏感信息。

Severity

中

Patch Name

Paritytech Parity绕过同源策略漏洞的补丁

Patch Description

Parity Browser是一款轻量级的快速Ethereum（编程语言）客户端。 Parity Browser 1.6.10及之前的版本中存在安全漏洞。远程攻击者可通过借助奇偶校验位Web代理引擎请求其他网站利用该漏洞获取敏感信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://github.com/paritytech/parity/commit/53609f703e2f1af76441344ac3b72811c726a215

Reference

http://seclists.org/fulldisclosure/2018/Jan/35

Impacted products

Name
paritytech Browser <=1.6.10

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-18016"
    }
  },
  "description": "Parity Browser\u662f\u4e00\u6b3e\u8f7b\u91cf\u7ea7\u7684\u5feb\u901fEthereum\uff08\u7f16\u7a0b\u8bed\u8a00\uff09\u5ba2\u6237\u7aef\u3002\r\n\r\nParity Browser 1.6.10\u53ca\u4e4b\u524d\u7684\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u501f\u52a9\u5947\u5076\u6821\u9a8c\u4f4dWeb\u4ee3\u7406\u5f15\u64ce\u8bf7\u6c42\u5176\u4ed6\u7f51\u7ad9\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002",
  "discovererName": "tintinweb",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://github.com/paritytech/parity/commit/53609f703e2f1af76441344ac3b72811c726a215",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-04095",
  "openTime": "2018-03-02",
  "patchDescription": "Parity Browser\u662f\u4e00\u6b3e\u8f7b\u91cf\u7ea7\u7684\u5feb\u901fEthereum\uff08\u7f16\u7a0b\u8bed\u8a00\uff09\u5ba2\u6237\u7aef\u3002\r\n\r\nParity Browser 1.6.10\u53ca\u4e4b\u524d\u7684\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u501f\u52a9\u5947\u5076\u6821\u9a8c\u4f4dWeb\u4ee3\u7406\u5f15\u64ce\u8bf7\u6c42\u5176\u4ed6\u7f51\u7ad9\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Paritytech Parity\u7ed5\u8fc7\u540c\u6e90\u7b56\u7565\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "paritytech Browser \u003c=1.6.10"
  },
  "referenceLink": "http://seclists.org/fulldisclosure/2018/Jan/35",
  "serverity": "\u4e2d",
  "submitTime": "2018-01-11",
  "title": "Paritytech Parity\u7ed5\u8fc7\u540c\u6e90\u7b56\u7565\u6f0f\u6d1e"
}

CVE-2017-18016 (GCVE-0-2017-18016)

Vulnerability from cvelistv5 – Published: 2018-01-11 16:00 – Updated: 2024-08-05 21:06

Summary

Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine (reusing the current website's token, which is not bound to an origin).

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

4 references

URL	Tags
https://github.com/tintinweb/pub/tree/master/pocs…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2018/01/10/1	mailing-listx_refsource_MLIST
https://www.exploit-db.com/exploits/43499/	exploitx_refsource_EXPLOIT-DB
https://github.com/paritytech/parity/commit/53609…	x_refsource_CONFIRM

Date Public

2017-06-22 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T21:06:50.142Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-18016"
          },
          {
            "name": "[oss-security] 20180110 CVE-2017-18016 - Paritytech Parity Ethereum built-in Dapp Browser \u003c= v1.6.10 webproxy token reuse same-origin policy bypass",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2018/01/10/1"
          },
          {
            "name": "43499",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/43499/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/paritytech/parity/commit/53609f703e2f1af76441344ac3b72811c726a215"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-06-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine (reusing the current website\u0027s token, which is not bound to an origin)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-12T10:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-18016"
        },
        {
          "name": "[oss-security] 20180110 CVE-2017-18016 - Paritytech Parity Ethereum built-in Dapp Browser \u003c= v1.6.10 webproxy token reuse same-origin policy bypass",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2018/01/10/1"
        },
        {
          "name": "43499",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/43499/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/paritytech/parity/commit/53609f703e2f1af76441344ac3b72811c726a215"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-18016",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine (reusing the current website\u0027s token, which is not bound to an origin)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-18016",
              "refsource": "MISC",
              "url": "https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-18016"
            },
            {
              "name": "[oss-security] 20180110 CVE-2017-18016 - Paritytech Parity Ethereum built-in Dapp Browser \u003c= v1.6.10 webproxy token reuse same-origin policy bypass",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2018/01/10/1"
            },
            {
              "name": "43499",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/43499/"
            },
            {
              "name": "https://github.com/paritytech/parity/commit/53609f703e2f1af76441344ac3b72811c726a215",
              "refsource": "CONFIRM",
              "url": "https://github.com/paritytech/parity/commit/53609f703e2f1af76441344ac3b72811c726a215"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-18016",
    "datePublished": "2018-01-11T16:00:00.000Z",
    "dateReserved": "2018-01-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T21:06:50.142Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2018-04095

CVE-2017-18016 (GCVE-0-2017-18016)

Tags

Sightings

Nomenclature

Related by attack behaviour