7.5

CVE-2021-21373

Exploit

Nimble falls back to insecure http url when fetching packages

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker able to perform MitM can deliver a modified package list containing malicious software packages. If the packages are installed and used the attack escalates to untrusted code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nim-lang ≫ Nim Version < 1.2.10
Nim-lang ≫ Nim Version >= 1.4.0 < 1.4.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.16% 0.629
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
security-advisories@github.com 7.5 1.6 5.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L
CWE-295 Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

CWE-348 Use of Less Trusted Source

The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.

https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/
Third Party Advisory
Exploit
https://github.com/nim-lang/nimble/blob/master/changelog.markdown#0130
Third Party Advisory
Release Notes
https://github.com/nim-lang/security/security/advisories/GHSA-8w52-r35x-rgp8
Third Party Advisory