Description

A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument _func results in information disclosure. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.5.3 is recommended to address this issue. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.3",
  "pubDate": "2026-10-12T08:17:18.837Z",
  "pubdate": "2026-10-12T08:17:18.837Z",
  "executiveSummary": "A critical information disclosure vulnerability has been identified in tsi-coop tsi-dpdp-cms versions 0.5.0, 0.5.1, and 0.5.2.\nThe vulnerability resides within the JSON Schema Validation component, allowing an unauthenticated remote attacker to extract sensitive data by manipulating the '_func' argument.\nThis flaw presents a significant security risk, as the exploit code has been publicly disclosed, increasing the likelihood of active exploitation.\nThe impact involves the unauthorized disclosure of information, which could potentially expose sensitive system data or internal configurations.\nSuccessful exploitation requires no prior authentication and can be performed remotely over the network.\nUsers and administrators are advised to prioritize updating to version 0.5.3, which includes the necessary security patches provided by the vendor.",
  "technicalDetails": "The vulnerability in tsi-dpdp-cms is rooted in an improper input validation flaw within the JSON Schema Validation component.\nSpecifically, the application fails to adequately sanitize or restrict the '_func' argument provided during the request process. By injecting arbitrary or crafted values into this parameter, an attacker can coerce the component into revealing sensitive information that should otherwise be protected or restricted.\nThe attack flow begins with a remote actor sending a maliciously crafted HTTP request targeting the JSON Schema Validation endpoint. By manipulating the '_func' argument, the attacker influences the internal logic of the validation function. In scenarios where the application processes the schema validation, the improper handling of the '_func' input results in the leakage of internal data structures, environment variables, or other sensitive information encapsulated within the system's runtime memory or backend responses.\nThe vulnerability is remotely exploitable, meaning that no local access or prior authentication is required to initiate the attack. Since the exploit vector is publicly available, threat actors can leverage existing scripts to systematically target vulnerable installations of tsi-dpdp-cms.\nUpon successful exploitation, the payload behavior triggers an information disclosure response from the application, returning sensitive content directly to the attacker. The post-exploitation impact is primarily characterized by the exposure of sensitive technical data, which may be leveraged by an attacker to facilitate further reconnaissance or deeper exploitation of the host environment.\nThe flaw affects versions 0.5.0, 0.5.1, and 0.5.2 of the tsi-dpdp-cms product. The root cause is categorized as an input validation failure where the application does not verify the integrity or safety of the '_func' argument before processing it within the context of JSON schema evaluation.\nBy bypassing the intended security checks, the attacker can effectively force the service to leak sensitive details about the application's configuration or internal logic. As the component is responsible for schema validation, the vulnerability is exposed at the interface layer, making it accessible to any network-connected device capable of interacting with the service's API or web interface."
}