Critical severity · published Jul 26, 2023
CVE-2023-31465
An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28
9.8
CVSS
46.3%
EPSS
No
On KEV
Description
An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests from various timekeeper streams, it is possible to find the getsamplebacklog call. Some query parameters are passed directly in the URL and named arg[x], with x an integer starting from 1; it is possible to modify arg[2] to insert Bash code that will be executed directly by the server.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)46.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TI
Timekeeper · Fsmlabs
8.0.17 through 8.0.28 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-31465
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-31465
Product
https://fsmlabs.com/fsmlabs-cybersecurity/
Exploit
https://github.com/CapgeminiCisRedTeam/Disclosure/blob/main/CVE%20PoC/CVE-2023-31465.md
More from Timekeeper
5.4
CVE-2023-31466
An XSS issue was discovered in FSMLabs TimeKeeper 8.0.17