CVE-2024-43791
published 2024-08-23CVE-2024-43791: RequestStore provides per-request global storage for Rack. The files published as part of request_store 1.3.2 have 0666 permissions, meaning that they are…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.19%
9.4th percentile
RequestStore provides per-request global storage for Rack. The files published as part of request_store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not allow access for local users, so the chances of this being exploited are very low, given that the vast majority of users will have upgraded, and those that have not, if any, are not likely to be exposed.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | ruby-request-store | — | — |
| steveklabnik | request_store | — | — |
| steveklabnik | request_store | — | — |
| steveklabnik | request_store | >= 1.3.2 < 1.4.0 | 1.4.0 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8LOW
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
RequestStore: Incorrect Default Permissions in request_store 1.3.2
vendor_redhat·2024-08-23·CVSS 7.8
CVE-2024-43791 [HIGH] CWE-276 RequestStore: Incorrect Default Permissions in request_store 1.3.2
RequestStore: Incorrect Default Permissions in request_store 1.3.2
RequestStore provides per-request global storage for Rack. The files published as part of request_store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not allow access for local users, so the chances of this being exploited are very low, given that the vast majority of users will have upgraded, and those that have not, if any, are not likely to be exposed.
A flaw was found in RequestStore, which provides per-request global storage. This flaw allows a malicious user to execute arbitrary code due to global permission issues.
Package: 3scale-amp-system-container (Red Hat 3scale API
Debian
CVE-2024-43791: ruby-request-store - RequestStore provides per-request global storage for Rack. The files published a...
vendor_debian·2024·CVSS 7.8
CVE-2024-43791 [HIGH] CVE-2024-43791: ruby-request-store - RequestStore provides per-request global storage for Rack. The files published a...
RequestStore provides per-request global storage for Rack. The files published as part of request_store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not allow access for local users, so the chances of this being exploited are very low, given that the vast majority of users will have upgraded, and those that have not, if any, are not likely to be exposed.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
OSV
request_store has Incorrect Default Permissions
osv·2024-08-23
CVE-2024-43791 [MEDIUM] request_store has Incorrect Default Permissions
request_store has Incorrect Default Permissions
### Impact
The files published as part of request_store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code.
This version was published in 2017, and most production environments do not allow access for local users, so the chances of this being exploited are very low, given that the vast majority of users will have upgraded, and those that have not, if any, are not likely to be exposed.
### Patches
I am not aware of any other version of the gem with incorrect permissions, so simply upgrading should fix the issue.
### Workarounds
You could chmod the files yourself, I guess.
### References
https://cwe.mitre.org/data/definitions/276.html
OSV
CVE-2024-43791: RequestStore provides per-request global storage for Rack
osv·2024-08-23·CVSS 7.8
CVE-2024-43791 [HIGH] CVE-2024-43791: RequestStore provides per-request global storage for Rack
RequestStore provides per-request global storage for Rack. The files published as part of request_store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not allow access for local users, so the chances of this being exploited are very low, given that the vast majority of users will have upgraded, and those that have not, if any, are not likely to be exposed.
GHSA
request_store has Incorrect Default Permissions
ghsa·2024-08-23
CVE-2024-43791 [MEDIUM] CWE-276 request_store has Incorrect Default Permissions
request_store has Incorrect Default Permissions
### Impact
The files published as part of request_store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code.
This version was published in 2017, and most production environments do not allow access for local users, so the chances of this being exploited are very low, given that the vast majority of users will have upgraded, and those that have not, if any, are not likely to be exposed.
### Patches
I am not aware of any other version of the gem with incorrect permissions, so simply upgrading should fix the issue.
### Workarounds
You could chmod the files yourself, I guess.
### References
https://cwe.mitre.org/data/definitions/276.html
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-08-23
Published