Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2024-22423
CVE-2024-22423:
Python vulnerability analysis and mitigation
Overview
CVE-2024-22423 affects yt-dlp, a youtube-dl fork with additional features and fixes. The vulnerability was discovered in the --exec command functionality when using %q on Windows systems, allowing for potential remote code execution through command injection. The issue was introduced in version 2021.04.11 and was patched in version 2024.04.09. This vulnerability is a bypass of the previous fix for CVE-2023-40581 (CERT VU#123335, GitHub Advisory).
Technical details
The vulnerability stems from insufficient escaping of special characters in the shell escape function. The previous patch for CVE-2023-40581 attempted to prevent RCE by replacing double quotes with two double quotes, but this escaping mechanism was not sufficient and still allowed for environment variable expansion. The vulnerability has a CVSS v3.1 score of 8.3 (High), with the vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H (GitHub Advisory).
Impact
Successful exploitation of this vulnerability allows attackers to execute arbitrary commands on Windows systems when using the --exec command with %q output template expansion. The impact is particularly severe when processing untrusted input through the command execution functionality (CERT VU#123335).
Mitigation and workarounds
The primary mitigation is to upgrade to yt-dlp version 2024.04.09 which properly escapes % by replacing it with %%cd:~,%. For users unable to upgrade, several workarounds are available: avoid using output template expansion in --exec other than {} (filepath), verify fields don't contain %, ", | or & if expansion is needed, or use info json instead of --exec. Additionally, users should exercise caution when using --exec with untrusted input (GitHub Advisory).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management