Merge pull request #601 from frkngksl:mudlerRCE

PiperOrigin-RevId: 807857134
Change-Id: Ibfe9e4500783827e3536a5b17861b50d98abb85b

Author: copybara-github

community/detectors/mudler_localai_cve_2024_6983/README.md

@@ -0,0 +1,20 @@
+# Mudler LocalAI RCE CVE-2024-6983 Detector
+
+Mudler LocalAI versions before 2.19.4 are vulnerable to remote code execution.
+The vulnerability arises because the localai backend receives inputs not only
+from the configuration file but also from other inputs, allowing an attacker to
+upload a binary file and execute malicious code. This can lead to the attacker
+gaining full control over the system.
+
+-   https://huntr.com/bounties/f91fb287-412e-4c89-87df-9e4b6e609647
+-   https://sightline.protectai.com/vulnerabilities/b182990f-02ea-49d0-9fad-61030cbe6460/assess
+
+## Build jar file for this plugin
+
+Using `gradlew`:
+
+```shell
+./gradlew jar
+```
+
+Tsunami identifiable jar file is located at `build/libs` directory.

community/detectors/mudler_localai_cve_2024_6983/build.gradle

@@ -0,0 +1,38 @@
+plugins {
+    id 'java-library'
+}
+
+description = 'Tsunami CVE-2024-6983 VulnDetector plugin.'
+group 'com.google.tsunami'
+version '0.0.1-SNAPSHOT'
+
+
+repositories {
+    maven { // The google mirror is less flaky than mavenCentral()
+        url 'https://maven-central.storage-download.googleapis.com/repos/central/data/'
+    }
+    mavenCentral()
+    mavenLocal()
+}
+
+def coreRepoBranch = System.getenv("GITBRANCH_TSUNAMI_CORE") ?: "stable"
+def tcsRepoBranch = System.getenv("GITBRANCH_TSUNAMI_TCS") ?: "stable"
+
+dependencies {
+    implementation("com.google.tsunami:tsunami-common") {
+      version { branch = "${coreRepoBranch}" }
+    }
+    implementation("com.google.tsunami:tsunami-plugin") {
+      version { branch = "${coreRepoBranch}" }
+    }
+    implementation("com.google.tsunami:tsunami-proto") {
+      version { branch = "${coreRepoBranch}" }
+    }
+
+    testImplementation "junit:junit:4.13.2"
+    testImplementation "org.mockito:mockito-core:5.18.0"
+    testImplementation "com.google.truth:truth:1.4.4"
+    testImplementation "com.squareup.okhttp3:mockwebserver:3.12.0"
+    testImplementation "com.google.truth.extensions:truth-java8-extension:1.4.4"
+    testImplementation "com.google.truth.extensions:truth-proto-extension:1.4.4"
+}

community/detectors/mudler_localai_cve_2024_6983/settings.gradle

@@ -0,0 +1,12 @@
+rootProject.name = 'CVE-2024-6983'
+
+def coreRepository = System.getenv("GITREPO_TSUNAMI_CORE") ?: "https://github.com/google/tsunami-security-scanner.git"
+def tcsRepository = System.getenv("GITREPO_TSUNAMI_TCS") ?: "https://github.com/google/tsunami-security-scanner-callback-server.git"
+
+sourceControl {
+    gitRepository("${coreRepository}") {
+        producesModule("com.google.tsunami:tsunami-common")
+        producesModule("com.google.tsunami:tsunami-plugin")
+        producesModule("com.google.tsunami:tsunami-proto")
+    }
+}

community/detectors/mudler_localai_cve_2024_6983/src/main/java/com/google/tsunami/plugins/detectors/cves/cve20246983/Cve20246983DetectorBootstrapModule.java

@@ -0,0 +1,27 @@
+/*
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.tsunami.plugins.detectors.cves.cve20246983;
+
+import com.google.tsunami.plugin.PluginBootstrapModule;
+
+/** An CVE-2024-6983 Guice module that bootstraps the {@link Cve20246983VulnDetector}. */
+public class Cve20246983DetectorBootstrapModule extends PluginBootstrapModule {
+  @Override
+  protected void configurePlugin() {
+    registerPlugin(Cve20246983VulnDetector.class);
+  }
+}