Bug 1215599 (CVE-2023-43091) - VUL-0: CVE-2023-43091: gnome-maps: code injection attack via its service.json
Summary: VUL-0: CVE-2023-43091: gnome-maps: code injection attack via its service.json
Status: NEW
Alias: CVE-2023-43091
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: openSUSE GNOME
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/379648/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-09-22 07:11 UTC by Robert Frohl
Modified: 2023-09-22 07:30 UTC (History)
1 user (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Robert Frohl 2023-09-22 07:11:30 UTC 
CVE-2023-43091

GNOME Maps is vulnerable to a code injection attack (similar to XSS) 
via its service.json configuration file downloaded from 
https://static.gnome.org/gis.gnome.org/v1/service.json. If the 
configuration file is malicious, it may execute arbitrary code.

Affected versions: 43 prior to 43.7, 44 prior to 44.4

Discoverer/Credit: Michael Evans

References, additional information:
https://gitlab.gnome.org/GNOME/gnome-maps/-/issues/588
https://gitlab.gnome.org/GNOME/gnome-maps/-/commit/d26cd774d524404ef7784e6808f551de83de4bea

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-43091
https://bugzilla.redhat.com/show_bug.cgi?id=2239091
Comment 1 Robert Frohl 2023-09-22 07:26:06 UTC 
openSUSE:Factory already fixed, openSUSE:Backports:SLE-15-SP* on older, unaffected version.