Miaomiaowu Insecure Direct Object Reference in User Configurations

Executive Summary

Miaomiaowu before version 0.9.3 has an insecure direct object reference vulnerability in the /api/user/proxy-provider-configs endpoint. This flaw allows authenticated users to access other users' configurations by manipulating the auto-incrementing external_subscription_id parameter. Attackers can view sensitive data such as override scripts, filter rules, custom request headers, and health-check URLs belonging to other users.

Useful 0 Not Useful 0

Detection Guidance

Check for unauthorized access to /api/user/proxy-provider-configs by monitoring API logs for unusual requests. Look for repeated attempts to access other users' configurations by iterating the external_subscription_id parameter.

Useful 0 Not Useful 0

Impact Analysis

If you are a user of Miaomiaowu before 0.9.3, an attacker with access to your account or the ability to exploit this flaw could read your proxy provider configurations. This may expose your network settings, custom scripts, and other sensitive data, potentially leading to further attacks or unauthorized access to your systems.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR's data protection principles and HIPAA's requirements for safeguarding protected health information. Organizations using the affected software may face compliance breaches, legal penalties, and reputational damage.

Useful 0 Not Useful 0

Mitigation Strategies

Update Miaomiaowu to version 0.9.3 or later to patch the insecure direct object reference. Ensure proper access controls are in place to prevent unauthorized access to user configurations.

Useful 0 Not Useful 0