exploitDog

CVE-2021-41560

Опубликовано: 15 дек. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Средний

Описание

OpenCATS through 0.9.6 allows remote attackers to execute arbitrary code by uploading an executable file via lib/FileUtility.php.

Ссылки

https://github.com/Nickguitar/RevCAT
Exploit
Patch
Third Party Advisory
https://github.com/opencats/OpenCATS/commit/b1af3bde1f68bec1c703ad66a3e390f15ed8ebe1
Patch
Third Party Advisory
https://youtu.be/isiDISag7CM
Broken Link
Third Party Advisory
https://github.com/Nickguitar/RevCAT
Exploit
Patch
Third Party Advisory
https://github.com/opencats/OpenCATS/commit/b1af3bde1f68bec1c703ad66a3e390f15ed8ebe1
Patch
Third Party Advisory
https://youtu.be/isiDISag7CM
Broken Link
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opencats:opencats:*:*:*:*:*:*:*:*

Версия до 0.9.6 (включая)

EPSS

Процентиль: 98%

0.46152

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-c9rc-7w87-3h5x

github

около 4 лет назад

OpenCATS through 0.9.6 allows remote attackers to execute arbitrary code by uploading an executable file via lib/FileUtility.php.

EPSS

Процентиль: 98%

0.46152

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-434