RCE vulnerabilities in open source software Cachet could put users at risk

guest · Sep 29, 2021

RCE vulnerabilities in open source software Cachet could put users at risk
Patches released for status page management system flaws
September 29, 2021
https://portswigger.net/daily-swig/...ource-software-cachet-could-put-users-at-risk

Multiple security vulnerabilities in open source status page system Cachet could allow an attacker to execute arbitrary code and steal sensitive data, researchers have warned.

Cachet is a project that allows users to do such tasks as listing service components, reporting incidents, and customizing the look of their status page, among other features.
Click to expand...

Troublesome trio
The first bug (CVE-2021-39172) is a newline injection that is triggered when users update an instance’s configuration, such as the email settings.
A second vulnerability (CVE-2021-39174) is also related to this feature, and allows attackers to exfiltrate secrets that are stored in the configuration file – for example, database passwords and framework keys.

Finally, the last bug (CVE-2021-39173) is “much simpler” according to researchers, and allows an attacker to change the setup process even if the target instance is already fully configured.
Click to expand...

The vulnerabilities have since been patched, though Chauchefoin told The Daily Swig that the disclosure process was not smooth sailing.
Click to expand...

SonarSource: Cachet 2.4: Code Execution via Laravel Configuration Injection

Log in or Sign up

RCE vulnerabilities in open source software Cachet could put users at risk

guest Guest

Log in or Sign up

RCE vulnerabilities in open source software Cachet could put users at risk

guest Guest

Useful Searches