CVE-2021-42561

Опубликовано: 12 янв. 2022

Источник: nvd

CVSS3: 8.8

CVSS2: 9

EPSS Средний

Описание

An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a python "os.system" function. This allows attackers to use shell metacharacters (e.g., backticks "``" or dollar parenthesis "$()" ) in order to escape the current command and execute arbitrary shell commands.

Ссылки

https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42561-Command%20Injection%20Via%20the%20Human%20Plugin-MITRE%20Caldera
Exploit
Third Party Advisory
https://github.com/mitre/caldera/releases
Release Notes
Third Party Advisory
https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42561-Command%20Injection%20Via%20the%20Human%20Plugin-MITRE%20Caldera
Exploit
Third Party Advisory
https://github.com/mitre/caldera/releases
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mitre:caldera:*:*:*:*:*:*:*:*

Версия до 2.8.1 (включая)

EPSS

Процентиль: 93%

0.10288

Средний

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-74

Связанные уязвимости

GHSA-3893-j6q6-whq8