CVE-2024-42468
published 2024-08-12CVE-2024-42468: openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. CometVisuServlet in versions prior to…
PriorityP345high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.81%
52.2th percentile
openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. CometVisuServlet in versions prior to 4.2.1 is susceptible to an unauthenticated path traversal vulnerability. Local files on the server can be requested via HTTP GET on the CometVisuServlet. This issue may lead to information disclosure. Users should upgrade to version 4.2.1 of the CometVisu add-on of openHAB to receive a patch.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| openhab | openhab | < 4.2.1 | 4.2.1 |
| openhab | openhab-webui | < 4.2.1 | 4.2.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
CometVisu Backend for openHAB has a path traversal vulnerability
ghsa·2024-08-09
CVE-2024-42468 [MEDIUM] CWE-22 CometVisu Backend for openHAB has a path traversal vulnerability
CometVisu Backend for openHAB has a path traversal vulnerability
openHAB's [CometVisuServlet](https://github.com/openhab/openhab-webui/blob/1c03c60f84388b9d7da0231df2d4ebb1e17d3fcf/bundles/org.openhab.ui.cometvisu/src/main/java/org/openhab/ui/cometvisu/internal/servlet/CometVisuServlet.java#L75) is susceptible to an unauthenticated path traversal vulnerability.
Local files on the server can be requested via HTTP GET on the CometVisuServlet.
This vulnerability was discovered with the help of CodeQL's [Uncontrolled data used in path expression](https://codeql.github.com/codeql-query-help/java/java-path-injection/) query.
## Impact
This issue may lead to Information Disclosure.
OSV
CometVisu Backend for openHAB has a path traversal vulnerability
osv·2024-08-09
CVE-2024-42468 [MEDIUM] CometVisu Backend for openHAB has a path traversal vulnerability
CometVisu Backend for openHAB has a path traversal vulnerability
openHAB's [CometVisuServlet](https://github.com/openhab/openhab-webui/blob/1c03c60f84388b9d7da0231df2d4ebb1e17d3fcf/bundles/org.openhab.ui.cometvisu/src/main/java/org/openhab/ui/cometvisu/internal/servlet/CometVisuServlet.java#L75) is susceptible to an unauthenticated path traversal vulnerability.
Local files on the server can be requested via HTTP GET on the CometVisuServlet.
This vulnerability was discovered with the help of CodeQL's [Uncontrolled data used in path expression](https://codeql.github.com/codeql-query-help/java/java-path-injection/) query.
## Impact
This issue may lead to Information Disclosure.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/openhab/openhab-webui/blob/1c03c60f84388b9d7da0231df2d4ebb1e17d3fcf/bundles/org.openhab.ui.cometvisu/src/main/java/org/openhab/ui/cometvisu/internal/servlet/CometVisuServlet.java#L75https://github.com/openhab/openhab-webui/commit/630e8525835c698cf58856aa43782d92b18087f2https://github.com/openhab/openhab-webui/security/advisories/GHSA-pcwp-26pw-j98w
2024-08-12
Published