CVE-2023-25561

Advisory

DataHub's AuthServiceClient, particularly versions below 0.8.45, creates JSON strings using format strings with user-controlled data. This approach lets potential attackers alter these JSON strings and forward them to the backend, causing potential misuse and authentication bypasses. This could lead to the creation of system accounts, potentially resulting in full system compromise. This vulnerability was discovered and reported by the GitHub Security lab and is being tracked under GHSL-2022-081.
https://github.com/datahub-project/datahub/security/advisories/GHSA-7wc6-p6c4-522c

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/datahub-project/datahub/blob/fdf4e48495f083314f59c414bcc7c2601633a2b8/datahub-frontend/app/security/AuthenticationManager.java#L26
• https://github.com/datahub-project/datahub/security/advisories/GHSA-7wc6-p6c4-522c
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25561