CVE-2024-53848

Advisory

Affected versions of check-jsonschema are vulnerable to Acceptance of Extraneous Untrusted Data With Trusted Data (CWE-349). This vulnerability allows attackers to inject and process untrusted $ref schemas alongside trusted schemas, potentially leading to cache poisoning or execution of malicious schemas. The attack vector involves crafting trusted schemas that include malicious $ref URLs, which are fetched and treated as trusted without proper validation. Vulnerable methods include schema loading and caching mechanisms. Exploitability is high if attackers can influence schema contents. Mitigation involves upgrading to versions where cache filenames are securely hashed using SHA256 and implementing strict validation of fetched schemas to ensure their integrity and authenticity.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/python-jsonschema/check-jsonschema/commit/c52714b85e6725b1b24516fbdedacb333b939152
• https://github.com/advisories/GHSA-q6mv-284r-mp36
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53848