{"id":"CVE-2024-24759","published":"2024-09-05T16:30:38Z","modified":"2024-09-05T17:46:08Z","title":"MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding","vendor":"mindsdb","product":"mindsdb","tier":"tail","description":{"text":"MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 23.12.4.2, a threat actor can bypass the server-side request forgery protection on the whole website with DNS Rebinding. The vulnerability can also lead to denial of service. Version 23.12.4.2 contains a patch.","provenance":"source","from":"CVE.org"},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.04936,"percentile":0.92144,"provenance":"source"},"cwes":[{"id":"CWE-918","name":"Server-Side Request Forgery"}],"references":[{"url":"https://github.com/mindsdb/mindsdb/security/advisories/GHSA-4jcv-vp96-94xr","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/mindsdb/mindsdb/commit/5f7496481bd3db1d06a2d2e62c0dce960a1fe12b","tags":["x_refsource_MISC"]}],"priority":{"score":29.9,"factors":[{"name":"EPSS percentile","points":18.43},{"name":"Public exploit code","points":5.0},{"name":"CVSS severity","points":6.51}]},"exploitSources":{"nuclei":[{"id":"CVE-2024-24759","name":"MindsDB -DNS Rebinding SSRF Protection Bypass","severity":"high","path":"http/cves/2024/CVE-2024-24759.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24759.yaml"}],"provenance":"source"},"vendorSlug":"mindsdb","affectedVersions":[{"vendor":"mindsdb","product":"mindsdb","versions":["< 23.12.4.2"]}],"affected":[{"ecosystem":"PyPI","package":"mindsdb","vulnerableRanges":["<23.12.4.2"],"patched":["23.12.4.2"],"from":["GHSA-4jcv-vp96-94xr","PYSEC-2024-74"],"provenance":"source"}],"euvd":{"id":"EUVD-2024-0104","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2023-49795","published":"2023-12-11","fixed":"23.11.4.1","kev":false},{"cve":"CVE-2023-49796","published":"2023-12-11","fixed":"23.11.4.1","kev":false},{"cve":"CVE-2023-50731","published":"2023-12-22","fixed":"23.11.4.1","kev":false,"link":{"from":"CVE-2023-50731","to":"CVE-2024-24759","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:mindsdb","fromFixed":"23.11.4.1","toFixed":"23.12.4.2","daysApart":258}]}},{"cve":"CVE-2024-24759","published":"2024-09-05","fixed":"23.12.4.2","kev":false},{"cve":"CVE-2024-45846","published":"2024-09-12","fixed":"24.7.4.1","kev":false},{"cve":"CVE-2024-45847","published":"2024-09-12","fixed":"24.7.4.1","kev":false},{"cve":"CVE-2024-45848","published":"2024-09-12","fixed":"24.7.4.1","kev":false}],"package":"PyPI:mindsdb"}}