CVE-2024-40348 Scanner

Bazarr is a versatile tool used primarily by media enthusiasts for managing and downloading subtitles for various video content. It is developed as an open-source utility, making it widely accessible to users aiming to enhance their media experiences by providing synchronized subtitles. Bazarr integrates seamlessly with popular media management tools like Sonarr and Radarr, allowing users to automate the process of subtitle acquisition. Users often rely on Bazarr to ensure subtitle accuracy and match, which enhances the viewing experience, especially for foreign films and series. Due to its ease of use and integration capabilities, Bazarr has a large user base from casual users to media centers and enterprises demanding subtitle management efficiency.

An Arbitrary File Read vulnerability allows attackers to read files from the filesystem of the server running the affected application. In the case of Bazarr, before v. 1.4.3, this vulnerability means that unauthorized users could potentially exploit the system to access sensitive data without any authentication. Such vulnerabilities are critical because they can lead to information disclosure and compromise data security. By executing specific crafted requests, an attacker might be able to navigate and read files that are not intended to be accessible. The exposure of configuration files, user data, or system information can be exploited to further compromise systems or perform targeted attacks. Therefore, addressing such vulnerabilities is crucial to maintaining the integrity and confidentiality of sensitive data.

The Arbitrary File Read vulnerability in Bazarr is technically exploited by manipulating URL endpoints to access unintended files. Attackers can use a specific file traversal pattern, such as adding '../../../../' to access files located outside the application's root directory. Such files could include system configuration files like '/etc/passwd', which hold vital information about the system state. The vulnerability is triggered through a GET request targeting URLs that did not have sufficient validation checks to prevent directory traversal. These improperly secured endpoints serve as loopholes allowing potential file read operations. Users running Bazarr version less than 1.4.3 are at risk, making it essential to understand and patch this vulnerability promptly.

When exploited, this vulnerability can lead to considerable implications for the affected system. Exposure of sensitive files such as configuration files, user credentials, or system data could lead to unauthorized access and further exploitation of other vulnerabilities. Attackers may extract confidential information that can be used for identity theft, further system intrusions, or as leverage in ransom scenarios. Additionally, if crucial system files are accessed and modified, it could lead to system instability or downtime. Hence, recognizing and mitigating this vulnerability is vital for preserving not only the security but also the operational stability of the affected systems.

REFERENCES

• https://github.com/4rdr/proofs/blob/main/info/Bazaar_1.4.3_File_Traversal_via_Filename.md
• https://www.bazarr.media/
• https://github.com/bigb0x/CVE-2024-40348