CVE-2021-25294: Critical severity opencats vulnerability

Q: What is the severity of CVE-2021-25294?

CVE-2021-25294 is rated as critical due to its potential for remote code execution.

Q: How do I fix CVE-2021-25294?

To fix CVE-2021-25294, update OpenCATS to version 0.9.5-4 or later.

Q: What types of attacks can CVE-2021-25294 facilitate?

CVE-2021-25294 can facilitate remote code execution attacks through PHP object injection.

Q: Who is affected by CVE-2021-25294?

CVE-2021-25294 affects users of OpenCATS versions up to and including 0.9.5-3.

Q: What causes the vulnerability in CVE-2021-25294?

The vulnerability in CVE-2021-25294 is caused by unsafe deserialization in the handling of parameters in the index.php file.

Published Jan 18, 2021

Updated

OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution. This occurs because lib/DataGrid.php calls unserialize for the parametersactivity:ActivityDataGrid parameter. The PHP object injection exploit chain can leverage an destruct magic method in guzzlehttp.

Affected Software

1 affected component

OpenCATS OpenCATS<=0.9.5-3

Remediation

Patch Available

https://github.com/snoopysecurity/snoopysecurity.github.io/blob/master/web-application-security/2021/01/16/09_opencats_php_object_injection.html

Event History

Jan 18, 2021

CVE Published

via MITRE·05:28 AM

Data Sourced

via MITRE·05:28 AM

Description

Frequently Asked Questions

What is the severity of CVE-2021-25294?

CVE-2021-25294 is rated as critical due to its potential for remote code execution.

How do I fix CVE-2021-25294?