Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2021-39172

Date: August 27, 2021

Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges (User or Admin), can exploit a new line injection in the configuration edition feature (e.g. mail settings) and gain arbitrary code execution on the server. This issue was addressed in version 2.5.1 by improving "UpdateConfigCommandHandler" and preventing the use of new lines characters in new configuration values. As a workaround, only allow trusted source IP addresses to access to the administration dashboard.

Language: PHP

Severity Score

Related Resources (8)

https://github.com/fiveai/Cachet
https://github.com/fiveai/Cachet/releases/tag/v2.5.1
https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection
https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/
https://github.com/fiveai/Cachet/commit/6442976c25930cb370c65a22784b9caee7ed1de2
https://nvd.nist.gov/vuln/detail/CVE-2021-39172
https://github.com/fiveai/Cachet/security/advisories/GHSA-9jxw-cfrh-jxq6
https://www.mend.io/vulnerability-database/CVE-2021-39172

Severity Score

Weakness Type (CWE)

Improper Neutralization of CRLF Sequences ('CRLF Injection')

CWE-93

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): SINGLE
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us