CVE-2024-42474: 
NixOS vulnerability analysis and mitigation

Streamlit, a data-oriented application development framework for Python by Snowflake, was found to contain a path traversal vulnerability (CVE-2024-42474) when the static file sharing feature is enabled. The vulnerability specifically affects Windows systems and was discovered in versions prior to 1.37.0. The issue was patched on July 25, 2024, as part of Streamlit open source version 1.37.0 (GitHub Advisory, NVD).

The vulnerability exists in the static file sharing feature of Streamlit when running on Windows systems. The issue stems from improper path validation before performing file system operations, which could lead to path traversal attacks. The vulnerability has been assigned a CVSS v3.1 base score of 6.5 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating network accessibility with low attack complexity (NVD, Horizon3).

If exploited, this vulnerability could allow an attacker to leak the password hash of the Windows user running Streamlit. This exposure could potentially lead to unauthorized access if the password hash is successfully cracked, particularly concerning since the application is typically run by end users who tend to have more crackable passwords compared to system accounts (Horizon3).

The vulnerability can be exploited by unauthenticated attackers when the static file sharing feature is enabled. The attack can be executed both directly and indirectly through SSRF or XXE vulnerabilities affecting other perimeter assets, making it particularly dangerous. The exploitation is possible from the internet if the victim network hasn't blocked outbound SMB traffic (Horizon3).

The vulnerability has been patched in Streamlit version 1.37.0. Users are strongly advised to upgrade to this version or later. Additionally, organizations should configure host/network firewalls to block SMB traffic going out to the Internet as a general security measure. For enhanced security, users running Python on Windows should update to the latest version of Python to avoid related path validation issues (GitHub Advisory, Horizon3).