Description

CVE-2024-48963 is a code injection vulnerability in Snyk CLI before version 1.1294.0. This vulnerability allows an attacker to execute arbitrary code on a victim's system by tricking them into running the Snyk test inside an untrusted PHP project. The vulnerability has a CVSS score of 7.5, indicating a high severity level. However, the SOCRadar Vulnerability Risk Score (SVRS) is 46, indicating a moderate risk level. This is because the vulnerability requires specific conditions to be exploited and is not as easily exploitable as other vulnerabilities with a higher CVSS score.

Key Insights

• The vulnerability can be exploited by attackers to execute arbitrary code on a victim's system.
• The vulnerability is only exploitable if the victim runs the Snyk test inside an untrusted PHP project.
• Snyk recommends only scanning trusted projects to mitigate the risk of exploitation.
• The vulnerability is not currently being actively exploited in the wild.

Mitigation Strategies

• Update Snyk CLI to version 1.1294.0 or later.
• Only scan trusted PHP projects.
• Use a web application firewall (WAF) to block malicious requests.
• Implement input validation to prevent attackers from submitting malicious code.

Additional Information

• Threat Actors/APT Groups: None known
• Exploit Status: No active exploits published
• CISA Warnings: None
• In the Wild: No

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.