CVE-2024-43791 RequestStore has Incorrect Default Permissions
Local attackers can execute arbitrary code due to world-writable file permissions in the RequestStore Ruby library.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-43791?
CVE-2024-43791 is a high-severity vulnerability in steveklabnik request_store, published on 23 Aug 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
RequestStore provides per-request global storage for Rack. The files published as part of request_store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not allow access for local users, so the chances of this being exploited are very low, given that the vast majority of users will have upgraded, and those that have not, if any, are not likely to be exposed.
Weakness: CWE-276
Which versions are affected by CVE-2024-43791?
2 open source packages ship an affected version, including request_store. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
request_store RubyGems | From 1.3.2 | 1.4.0 |
request_store RubyGems | From 1.3.2 | 1.4.0 |
Products include Steveklabnik Request Store.
How do I fix CVE-2024-43791?
Upgrade request_store to 1.4.0 or later.
Is CVE-2024-43791 being exploited?
There is no known exploitation of CVE-2024-43791 in the wild and no public exploit code.
Sources
Also known as GHSA-frp2-5qfc-7r8m, UBUNTU-CVE-2024-43791.