Description
IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse view_feedback_nominee, view_feedback_topic, view_feedback_unrelated and edit_nominee to view confidential nominee identities, reclassify feedback, and change nominee email addresses.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ietf-tools | datatracker | < 12.83.0 | 12.83.0 |
References
- Patch Commit patch
- https://github.com/ietf-tools/datatracker product
- https://github.com/ietf-tools/datatracker/blob/3aa2f63af2b0198928e36db42203f55cfea53fbd/ietf/nomcom/views.py#L1001-L1010 technical-description
- datatracker v12.83.0 Release Notes release-notes
- VulnCheck Advisory: IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views third-party-advisory