CVE-2020-1956
HIGH KEV NUCLEIApache Kylin 2.3.0-2.6.5 and 3.0.1 - OS Command Injection via RESTful API
Title source: llmExploitation Summary
CVE-2020-1956 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 25, 2022. EIP tracks 1 public exploit from researchers including b510. A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC exploits CVE-2020-1956 in Apache Kylin by leveraging command injection in the configuration migration feature to achieve remote code execution. It authenticates as an admin user and injects a reverse shell payload into the configuration settings.
Description
Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.
Exploits (1)
This PoC exploits CVE-2020-1956 in Apache Kylin by leveraging command injection in the configuration migration feature to achieve remote code execution. It authenticates as an admin user and injects a reverse shell payload into the configuration settings.
Nuclei Templates (1)
http.favicon.hash:-186961397
icon_hash=-186961397
References (9)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H