CVE-2020-5847
CRITICAL KEV NUCLEIUnraid < 6.8.0 - Unauthenticated Remote Code Execution
Title source: llmExploitation Summary
CVE-2020-5847 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021.
EIP tracks 3 public exploits from researchers including tnpitsecurity, Nicolas CHATELAIN <[email protected]>, including a Metasploit module exploits/linux/http/unraid_auth_bypass_exec.
A Nuclei detection template is also available.
AI-analyzed exploit summary This is a detailed technical analysis of CVE-2020-5847, covering an authentication bypass via a whitelist flaw in `auth_request.php` and arbitrary code execution through variable overwriting using PHP's `extract` function. The writeup includes root cause analysis, exploit chain explanation, and affected versions.
Description
Unraid through 6.8.0 allows Remote Code Execution.
Exploits (3)
This is a detailed technical analysis of CVE-2020-5847, covering an authentication bypass via a whitelist flaw in `auth_request.php` and arbitrary code execution through variable overwriting using PHP's `extract` function. The writeup includes root cause analysis, exploit chain explanation, and affected versions.
This Metasploit module exploits CVE-2020-5847 and CVE-2020-5849 in Unraid 6.8.0, combining an authentication bypass with a PHP code execution vulnerability via insecure use of the `extract` function. It delivers a PHP payload encoded in base64 to achieve remote code execution as root.
This Metasploit module exploits CVE-2020-5847 and CVE-2020-5849 in Unraid 6.8.0, combining an authentication bypass with a PHP code execution vulnerability via insecure use of the `extract` function. It sends a crafted GET request to execute arbitrary PHP code as root.
Nuclei Templates (1)
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H