CVE-2024-29042: Translate Cache Poisoning Vulnerability
First published: Fri Mar 22 2024(Updated: )
### Summary An attacker controlling the second variable of the `translate` function is able to perform a cache poisoning attack. They can change the outcome of translation requests made by subsequent users. ### Details The `opt.id` parameter allows the overwriting of the cache key. If an attacker sets the `id` variable to the cache key that would be generated by another user, they can choose the response that user gets served. ### PoC Take the following simple server allowing users to supply text and the language to translate to. ```javascript import translate from "translate"; import express from 'express'; const app = express(); app.use(express.json()); app.post('/translate', async (req, res) => { const { text, language } = req.body; const result = await translate(text, language); return res.json(result); }); const port = 3000; app.listen(port, () => { console.log(`Server is running on port ${port}`); }); ``` We can send the following request to poison the cache: ``` {"text":"I hate you", "language":{"to":"nl","id":"undefined:en:nl:google:I love you"}} ```  Now, any user that attempts to translate "I love you" to Dutch, will get "I hate you" in Dutch as the response.  ### Impact An attacker can control the results other users may get
Credit: security-advisories@github.com security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| npm/translate | <3.0.0 | 3.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/franciscop/translate/security/advisories/GHSA-882j-4vj5-7vmj
- https://github.com/franciscop/translate/commit/7a2bf8b9f05f7c45c09683973ef4d8e995804aa4
- https://github.com/franciscop/translate/commit/cc1ba03078102f83e0503a96f1a081489bb865d3
- https://nvd.nist.gov/vuln/detail/CVE-2024-29042
- https://github.com/advisories/GHSA-882j-4vj5-7vmj (Advisory)
Frequently Asked Questions
What is the severity of CVE-2024-29042?
CVE-2024-29042 is considered to have a high severity due to the potential for cache poisoning attacks.
How do I fix CVE-2024-29042?
To mitigate CVE-2024-29042, update the 'translate' package to version 3.0.0 or later.
What types of attacks are possible with CVE-2024-29042?
CVE-2024-29042 allows attackers to perform cache poisoning attacks affecting translation requests for users.
Which versions of the 'translate' package are affected by CVE-2024-29042?
CVE-2024-29042 affects all versions of the 'translate' package prior to version 3.0.0.
Are there any known exploits for CVE-2024-29042?
Currently, there are no publicly disclosed exploits specifically targeting CVE-2024-29042.
- agent/weakness
- agent/title
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/description
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-882j-4vj5-7vmj
- alias/CVE-2024-29042
- agent/software-canonical-lookup
- agent/references
- collector/nvd-cve
- source/NVD
- agent/severity
- agent/event
- collector/nvd-api
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/tags
- agent/source
- package-manager/npm