CVE-2020-35131

CRITICALNuclei

agentejo cockpit Improper Control of Generation of Code ('Code Injection')

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-35131 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated by values in JSON data to the /auth/check or /auth/requestreset URI.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Nov 13, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Catalogued exploits
1
Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

cockpit

Browse agentejo / cockpit
VulnCheckVersion data not supplied

Proofs of concept

1

Catalogued exploits

ExploitDBCockpit CMS 0.6.1 - Remote Code ExecutionExploitDB exploitby Rafael ResendeNot analyzed1 file
ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryCRITICALCockpit CMS 0.6.1 - Remote Code ExecutionCVSS 9.8

Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated by values in JSON data to the /auth/check or /auth/requestreset URI.

Impact

Unauthenticated attackers can inject custom PHP code to achieve remote command execution, leading to complete Cockpit CMS compromise.

Remediation

Upgrade to Cockpit CMS version 0.6.1 or later.

WeaknessesCWE-94
AuthorsDhiyaneshDK
Template tagscvecve2020rcecockpitvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:agentejo:cockpit:*:*:*:*:*:*:*:*
Shodan: http.html:"cockpit"
FOFA: app="Cockpit"
https://github.com/agentejo/cockpit/commits/next/lib/MongoLite/Database.php https://github.com/agentejo/cockpit/releases/tag/0.6.1 https://www.exploit-db.com/exploits/49390 https://nvd.nist.gov/vuln/detail/CVE-2020-35131

Source: ProjectDiscovery

References

4