Exploitation Summary
CVE-2020-5849 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021.
EIP tracks 2 public exploits from researchers including Metasploit, Nicolas CHATELAIN <[email protected]>, including a Metasploit module exploits/linux/http/unraid_auth_bypass_exec.
AI-analyzed exploit summary This Metasploit module exploits CVE-2020-5849, an authentication bypass in Unraid 6.8.0, followed by arbitrary PHP code execution via insecure use of the `extract` function. It leverages a GET request with crafted parameters to achieve remote code execution as root.
Description
Unraid 6.8.0 allows authentication bypass.
Exploits (2)
This Metasploit module exploits CVE-2020-5849, an authentication bypass in Unraid 6.8.0, followed by arbitrary PHP code execution via insecure use of the `extract` function. It leverages a GET request with crafted parameters to achieve remote code execution as root.
This Metasploit module exploits CVE-2020-5849, an authentication bypass in Unraid 6.8.0, combined with an insecure PHP `extract` function usage to achieve remote code execution as root. It sends a crafted GET request to inject PHP code via URI-encoded payloads.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N