-
Type:
Change Request
-
Status:
Closed
-
Priority:
Medium
-
Resolution:
Done
-
-
-
Module:
BenAdmin
- Security
-
-
Item State:
Production Complete
- Closed
-
Issue Importance:
Must Have
-
Vulnerability Description:
WORKTERRA provides an interface for sending emails to administrators and WORKTERRA's customer support system. The backend does not rate-limit or validate the destination of these emails.
Impact:
A malicious user could use WORKTERRA servers as a spam delivery platform.
Verification and Attack Information:
Praetorian verified this finding by intercepting requests to the endpoint responsible for sending emails. A malicious user can modify the destination email address to any email address. Additionally, there are no controls in place to the number of emails sent within a given time frame. This finding was demonstrated by sending 50 emails to a test email account. The figure below shows that the emails are originating from WORKTERRA IP addresses.
Recommendation:
Validate the email's destination address on the server-side. Additionally, WORKTERRA should limit the number of emails that a user can send per-minute.
- relates to
-
ST-211
Restrict domain user for emails
-
-
Closed
{"report":{"apdex":1,"isInitial":true,"journeyId":"abd3d387-a484-475a-9c99-340515fdb5e0","key":"jira.project.issue.view-issue","navigationType":0,"readyForUser":816.5,"redirectCount":0,"resourceLoadedEnd":845.3000000044703,"resourceLoadedStart":265.80000000447035,"resourceTiming":[{"duration":40.69999999552965,"initiatorType":"link","name":"https://jira.workterra.net/s/3003653444a1e1a85555cab7dcfb3a21-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/css/_super/batch.css","startTime":265.80000000447035,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":265.80000000447035,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":306.5,"responseStart":0,"secureConnectionStart":0},{"duration":40.5,"initiatorType":"link","name":"https://jira.workterra.net/s/dd6a0911920485696ac20493290df627-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/css/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&richediton=true","startTime":266.1000000014901,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":266.1000000014901,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":306.6000000014901,"responseStart":0,"secureConnectionStart":0},{"duration":40.5,"initiatorType":"link","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css","startTime":266.1000000014901,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":266.1000000014901,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":306.6000000014901,"responseStart":0,"secureConnectionStart":0},{"duration":40.399999998509884,"initiatorType":"link","name":"https://jira.workterra.net/s/bd548f27bbf8f278bd83b60dd3284ed8-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css","startTime":266.20000000298023,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":266.20000000298023,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":306.6000000014901,"responseStart":0,"secureConnectionStart":0},{"duration":40.399999998509884,"initiatorType":"link","name":"https://jira.workterra.net/s/70725731a158a7140f19ddbd4201ba27-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css","startTime":266.30000000447035,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":266.30000000447035,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":306.70000000298023,"responseStart":0,"secureConnectionStart":0},{"duration":69.20000000298023,"initiatorType":"script","name":"https://jira.workterra.net/s/f2623af22c15df767ec6ff268ae0b8bd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":266.3999999985099,"connectEnd":266.3999999985099,"connectStart":266.3999999985099,"domainLookupEnd":266.3999999985099,"domainLookupStart":266.3999999985099,"fetchStart":266.3999999985099,"redirectEnd":0,"redirectStart":0,"requestStart":266.3999999985099,"responseEnd":335.6000000014901,"responseStart":335.6000000014901,"secureConnectionStart":266.3999999985099},{"duration":111.10000000149012,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/4.1.5/_/download/resources/com.atlassian.plugins.atlassian-chaperone:hotspot-tour/hotspot-tour.js?batch=false&locale=en-US","startTime":266.6000000014901,"connectEnd":266.6000000014901,"connectStart":266.6000000014901,"domainLookupEnd":266.6000000014901,"domainLookupStart":266.6000000014901,"fetchStart":266.6000000014901,"redirectEnd":0,"redirectStart":0,"requestStart":266.6000000014901,"responseEnd":377.70000000298023,"responseStart":377.70000000298023,"secureConnectionStart":266.6000000014901},{"duration":108,"initiatorType":"script","name":"https://jira.workterra.net/s/6ce676f2a5bcc9651cef6e7956f05def-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/js/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":266.6000000014901,"connectEnd":266.6000000014901,"connectStart":266.6000000014901,"domainLookupEnd":266.6000000014901,"domainLookupStart":266.6000000014901,"fetchStart":266.6000000014901,"redirectEnd":0,"redirectStart":0,"requestStart":266.6000000014901,"responseEnd":374.6000000014901,"responseStart":374.6000000014901,"secureConnectionStart":266.6000000014901},{"duration":111.5,"initiatorType":"script","name":"https://jira.workterra.net/s/6aa3fcf1fac5fd551eee0b69077524e6-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":266.70000000298023,"connectEnd":266.70000000298023,"connectStart":266.70000000298023,"domainLookupEnd":266.70000000298023,"domainLookupStart":266.70000000298023,"fetchStart":266.70000000298023,"redirectEnd":0,"redirectStart":0,"requestStart":266.70000000298023,"responseEnd":378.20000000298023,"responseStart":378.20000000298023,"secureConnectionStart":266.70000000298023},{"duration":111.80000000447035,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":267,"connectEnd":267,"connectStart":267,"domainLookupEnd":267,"domainLookupStart":267,"fetchStart":267,"redirectEnd":0,"redirectStart":0,"requestStart":267,"responseEnd":378.80000000447035,"responseStart":378.80000000447035,"secureConnectionStart":267},{"duration":112,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":267.1000000014901,"connectEnd":267.1000000014901,"connectStart":267.1000000014901,"domainLookupEnd":267.1000000014901,"domainLookupStart":267.1000000014901,"fetchStart":267.1000000014901,"redirectEnd":0,"redirectStart":0,"requestStart":267.1000000014901,"responseEnd":379.1000000014901,"responseStart":379.1000000014901,"secureConnectionStart":267.1000000014901},{"duration":112.29999999701977,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US","startTime":267.20000000298023,"connectEnd":267.20000000298023,"connectStart":267.20000000298023,"domainLookupEnd":267.20000000298023,"domainLookupStart":267.20000000298023,"fetchStart":267.20000000298023,"redirectEnd":0,"redirectStart":0,"requestStart":267.20000000298023,"responseEnd":379.5,"responseStart":379.5,"secureConnectionStart":267.20000000298023},{"duration":113.09999999403954,"initiatorType":"link","name":"https://jira.workterra.net/s/05c862146699bb029ceb0a489075e63b-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/bcd66e9a133a1b9f5fd14b56841e1c5b/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":267.30000000447035,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":267.30000000447035,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":380.3999999985099,"responseStart":0,"secureConnectionStart":0},{"duration":112.60000000149012,"initiatorType":"script","name":"https://jira.workterra.net/rest/api/1.0/shortcuts/805012/ea6f30d2bfdc99578bb23f4a5bac3ecd/shortcuts.js?context=issuenavigation&context=issueaction","startTime":267.3999999985099,"connectEnd":267.3999999985099,"connectStart":267.3999999985099,"domainLookupEnd":267.3999999985099,"domainLookupStart":267.3999999985099,"fetchStart":267.3999999985099,"redirectEnd":0,"redirectStart":0,"requestStart":267.3999999985099,"responseEnd":380,"responseStart":380,"secureConnectionStart":267.3999999985099},{"duration":113.30000000447035,"initiatorType":"link","name":"https://jira.workterra.net/s/9095228fa10daa2d3e3d7d5760c95e91-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":267.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":267.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":380.80000000447035,"responseStart":0,"secureConnectionStart":0},{"duration":113,"initiatorType":"script","name":"https://jira.workterra.net/s/c19a1b46e985d7fb85efaf27c8febfdd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":267.6000000014901,"connectEnd":267.6000000014901,"connectStart":267.6000000014901,"domainLookupEnd":267.6000000014901,"domainLookupStart":267.6000000014901,"fetchStart":267.6000000014901,"redirectEnd":0,"redirectStart":0,"requestStart":267.6000000014901,"responseEnd":380.6000000014901,"responseStart":380.6000000014901,"secureConnectionStart":267.6000000014901}],"threshold":1000,"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":129,"responseStart":261,"responseEnd":262,"domLoading":264,"domInteractive":888,"domContentLoadedEventStart":889,"domContentLoadedEventEnd":949,"domComplete":1286,"loadEventStart":1287,"loadEventEnd":1290,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[],"measures":[],"correlationId":"9298429d4b698a","effectiveType":"4g","downlink":9.5,"rtt":0,"serverDuration":100,"dbReadsTimeInMs":3,"dbConnsTimeInMs":4,"applicationHash":"156decd7d2b4272533aa6cefc8294af635e1da97","experiments":[]}}
Hi Venkatesh Pujari
I have checked it on CSS for HSPL company employee and it is working correctly.
Please verify again.