CVE-2020-11094: Potential unauthorized access to stored request & session data in October CMS Debugbar
Summary
CVE-2020-11094: Impact The debugbar contains a perhaps little known feature where it will log all requests (and all information pertaining to each request including session data) whenever it is enabled. Affects rainlab/debugbar-plugin versions < 3.1.0. Fixed in 3.1.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
October CMS Debugbar is a plugin that provides a debugging toolbar for the October CMS platform. It offers various features to assist developers in debugging their applications, including logging requests and session data. However, a misconfiguration in the plugin can lead to potential unauthorized access to stored request and session data.
Vulnerability Detail
The debugbar feature in October CMS Debugbar logs all requests and their associated information, including sensitive session data, when enabled. If the plugin is enabled on a system accessible to untrusted users, they can exploit this feature to view all requests made to the application and obtain sensitive information. This vulnerability also opens up the possibility of account takeovers, where non-authenticated users can gain access to authenticated user accounts and potentially gain full control over the system.
How To Fix
Minimum fixed version
3.1.0
This is the first release that contains the fix.
composer require rainlab/debugbar-plugin:3.1.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If you are unable to upgrade to version 3.1.0, you can manually apply the patch by following the instructions provided in the GitHub commit: https://github.com/rainlab/debugbar-plugin/commit/86dd29f9866d712de7d98f5f9dc67751b82ecd18
Conclusion
The potential unauthorized access to stored request and session data in October CMS Debugbar can lead to the exposure of sensitive information and account takeovers. It is crucial to upgrade to version 3.1.0 of the rainlab/debugbar-plugin to mitigate this vulnerability. If you have any further questions or need assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for rainlab/debugbar-plugin →
FAQ
The vulnerability allows untrusted users to access and view all requests made to the application, potentially obtaining sensitive information. It also opens up the possibility of account takeovers, where non-authenticated users can gain control over authenticated user accounts.
Yes, the vulnerability has been patched in version 3.1.0 of the rainlab/debugbar-plugin.
To fix the vulnerability, upgrade to version 3.1.0 of the rainlab/debugbar-plugin.
If you are unable to upgrade to version 3.1.0, you can manually apply the patch provided in the GitHub commit.
The vulnerability was reported by Freddie Poser to the RainLab team.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
