CyberRota Analysis
AI-GeneratedThe Semaphore UI web interface for managing DevOps tools is vulnerable due to a lack of CSRF protection and current-password confirmation at the /api/users/{id}/password endpoint, allowing unauthenticated attackers to change user passwords following user interaction. This high-severity flaw poses a significant risk to administrators and users, as it can lead to unauthorized access and potential compromise of sensitive data. Organizations using versions prior to 2.18.21 should prioritize upgrading to the latest version to mitigate this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.21, the /api/users/{id}/password endpoint accepts a cross-site request using the authenticated user's semaphore session cookie without CSRF protection or current-password confirmation, allowing an unauthenticated attacker to change an administrator's or another user's password after user interaction. This issue is fixed in version 2.18.21.