CVE-2024-21631

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jan 3, 2024
Updated: Jan 10, 2024
CWE ID 20
CWE ID 1104
CWE ID 190

Summary

CVE-2024-21631 is a vulnerability in Vapor, an HTTP web framework for Swift, affecting versions prior to 4.90.0. The vulnerability is related to the vapor_urlparser_parse function, which uses uint16_t indexes when parsing a URI's components. This can lead to integer overflows when parsing untrusted inputs, potentially impacting applications that rely on the URI type for validating user input. Attackers can exploit this vulnerability by manipulating the URL authority and tricking the application into accepting a URL to an untrusted destination. The vulnerability has a base score of 6.5, indicating a medium severity level, and an impact score of 3.6, with high integrity impact. Remediation involves updating to version 4 or newer of Vapor to mitigate the issue and ensure secure parsing of URIs.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-21631 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options