CVE-2021-42342
CRITICALGoAhead 4.0.0-4.1.3 and 5.x < 5.1.5 - Unrestricted File Upload via CGI Environment Variable Tunneling
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2021-42342. PoCs published by kimusan.
AI-analyzed exploit summary This PoC exploits CVE-2021-42342 in Goahead Webserver pre-5.1.5 by leveraging a flaw in the file upload filter that allows setting environment variables without the CGI_ prefix, leading to RCE via LD_PRELOAD. The exploit involves uploading a malicious shared object and triggering its execution.
Description
An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be passed to CGI scripts without being prefixed with the CGI prefix. This permits tunneling untrusted environment variables into vulnerable CGI scripts.
Exploits (2)
This PoC exploits CVE-2021-42342 in Goahead Webserver pre-5.1.5 by leveraging a flaw in the file upload filter that allows setting environment variables without the CGI_ prefix, leading to RCE via LD_PRELOAD. The exploit involves uploading a malicious shared object and triggering its execution.
This repository contains a functional exploit for CVE-2021-42342, targeting the Goahead webserver pre-5.1.5. The exploit leverages LD_PRELOAD to execute arbitrary code via a shared library, demonstrating both a simple 'Hello World' payload and a reverse shell.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H