Incorrect Authorization Affecting opencanary package, versions [,0.9.4)
Threat Intelligence
EPSS
0.05% (21st
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-OPENCANARY-8187305
- published 15 Oct 2024
- disclosed 14 Oct 2024
- credit 0x0L0RD
Introduced: 14 Oct 2024
CVE-2024-48911 Open this link in a new tabHow to fix?
Upgrade opencanary to version 0.9.4 or higher.
Overview
opencanary is an OpenCanary daemon
Affected versions of this package are vulnerable to Incorrect Authorization through the configuration file. An attacker can escalate privileges by modifying the configuration file, which is executed by the daemon running as root.