CVE-2023-28627 : Vulnerability Insights and Analysis

This CVE involves OS Command Injection via GIT_PATH in pymedusa. The vulnerability was published on March 27, 2023, by GitHub_M.

Understanding CVE-2023-28627

This vulnerability in pymedusa allows an attacker with access to the web interface to update the git executable path with arbitrary OS commands, potentially leading to the execution of arbitrary commands as the user running the pymedusa program.

What is CVE-2023-28627?

CVE-2023-28627 is an OS Command Injection vulnerability in pymedusa, an automatic video library manager for TV Shows. It occurs in versions prior to 1.0.12, enabling attackers to inject malicious commands through the git executable path in the advanced settings of the web interface.

The Impact of CVE-2023-28627

The impact of this vulnerability is rated as HIGH with a base score of 8.3 according to CVSS v3.1. It poses a risk to the confidentiality, integrity, and availability of the affected system.

Technical Details of CVE-2023-28627

This section provides more detailed information about the vulnerability including its description, affected systems, and the exploitation mechanism.

Vulnerability Description

The vulnerability allows an attacker to execute arbitrary OS commands by manipulating the git executable path in the web interface settings of pymedusa versions prior to 1.0.12.

Affected Systems and Versions

The affected system is pymedusa's Medusa product with versions lower than 1.0.12. Users with these versions are susceptible to the OS Command Injection vulnerability.

Exploitation Mechanism

Attackers can exploit this vulnerability by updating the git executable path with malicious OS commands through the /config/general/ > advanced settings in the pymedusa web interface.

Mitigation and Prevention

To mitigate the risks associated with CVE-2023-28627, users and administrators should take immediate steps and implement long-term security practices.

Immediate Steps to Take

Upgrade pymedusa to version 1.0.12 or later to eliminate the vulnerability.
Monitor for any suspicious activities on the web interface that may indicate exploitation attempts.

Long-Term Security Practices

Regularly update software and apply security patches promptly.
Implement least privilege access controls to limit the impact of potential attacks.

Patching and Updates

Refer to the GitHub repository of pymedusa for the latest patches and updates related to CVE-2023-28627.