Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-2121.
PoCs published by Metasploit, including Metasploit module exploits/linux/http/foreman_openstack_satellite_code_exec.
AI-analyzed exploit summary This exploit targets a code injection vulnerability in Foreman and Red Hat OpenStack/Satellite (CVE-2013-2121). It authenticates, retrieves a CSRF token, and injects a Ruby payload via the 'bookmarks/create' endpoint.
Description
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute.
Exploits (2)
This exploit targets a code injection vulnerability in Foreman and Red Hat OpenStack/Satellite (CVE-2013-2121). It authenticates, retrieves a CSRF token, and injects a Ruby payload via the 'bookmarks/create' endpoint.
This Metasploit module exploits a code injection vulnerability in Foreman and Red Hat OpenStack/Satellite by leveraging the 'bookmarks/create' endpoint to execute arbitrary Ruby code via crafted parameters. It authenticates, retrieves a CSRF token, and injects a payload into the 'bookmark[controller]' parameter.