CVE-2021-42561
high · 8.8An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a python "os.system" function. This allows attackers to use shell metacharacters (e.g., backticks "``" or dollar parenthesis "$()" ) in order to escape the current command and execute arbitrary shell commands.
8.8
CVSS
19.6%
EPSS (exploit prob.)
97th
EPSS percentile
2022-01-12
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-74
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| mitre | caldera | <= 2.8.1 |
Check a specific version with /api/v1/cve/match.
References
- https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42561-Command%20Injection%20Via%20the%20Human%20Plugin-MITRE%20Caldera
- https://github.com/mitre/caldera/releases
- https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42561-Command%20Injection%20Via%20the%20Human%20Plugin-MITRE%20Caldera
- https://github.com/mitre/caldera/releases
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2021-42561