CVE-2021-37840
HIGHaaPanel <= 6.8.12 - Cross-Site WebSocket Hijacking via /webssh Terminal
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-37840. PoCs published by EonSecurity.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2021-37840, demonstrating a WebSocket CSRF bypass in aaPanel that leads to remote code execution. The exploit leverages an incomplete fix where WebSocket endpoints accept connections before authentication and the CSRF token check can be bypassed.
Description
aaPanel through 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at a ws:// URL for /webssh (the victim must have configured Terminal with at least one host). Successful exploitation depends on the browser used by a potential victim (e.g., exploitation can occur with Firefox but not Chrome).
Exploits (1)
This repository contains a functional exploit for CVE-2021-37840, demonstrating a WebSocket CSRF bypass in aaPanel that leads to remote code execution. The exploit leverages an incomplete fix where WebSocket endpoints accept connections before authentication and the CSRF token check can be bypassed.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H