Detections
Analytics

SCA: security update for github.com/spectolabs/hoverfly (GHSA-6xx4-x46f-f897)

high Tenable Cloud Security Plugin ID 411721

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and
 testers. The `/api/v2/simulation` POST handler allows users to create new simulation views from the
 contents of a user-specified file. This feature can be abused by an attacker to read arbitrary files from
 the Hoverfly server. Note that, although the code prevents absolute paths from being specified, an
 attacker can escape out of the `hf.Cfg.ResponsesBodyFilesPath` base path by using `../` segments and reach
 any arbitrary files. This issue was found using the Uncontrolled data used in path expression CodeQL query
 for python. Users are advised to make sure the final path (`filepath.Join(hf.Cfg.ResponsesBodyFilesPath,
 filePath)`) is contained within the expected base path (`filepath.Join(hf.Cfg.ResponsesBodyFilesPath,
 "/")`). This issue is also tracked as GHSL-2023-274. (CVE-2024-45388)

See Also

https://github.com/advisories/GHSA-6xx4-x46f-f897

Plugin Details

Severity: High

ID: 411721

Version: Revision 1.7

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.67

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2024-45388

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS v4

Risk Factor: High

Base Score: 8.7

Threat Score: 8.7

Threat Vector: CVSS:4.0/E:P

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/3/2024

Vulnerability Publication Date: 9/2/2024

Reference Information

CVE: CVE-2024-45388