github.com
https://github.com/adaptlearning/adapt_authoring CVE-2024-50672
CRITICAL
Adapt Authoring Tool 0.11.3 - Remote Command Execution (RCE)
Record summary
CVE-2024-50672 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
A NoSQL injection vulnerability in Adapt Learning Adapt Authoring Tool <= 0.11.3 allows unauthenticated attackers to reset user and administrator account passwords via the "Reset password" feature. The vulnerability occurs due to insufficient validation of user input, which is used as a query in Mongoose's find() function. This makes it possible for attackers to perform a full takeover of the administrator account. Attackers can then use the newly gained administrative privileges to upload a custom plugin to perform remote code execution (RCE) on the server hosting the web application.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 27, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
adapt_authoring_toolBrowse adapt_authoring_tool / adapt_authoring_toolDefault status: unknown | CVE List | Through 0.11.3 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBAdapt Authoring Tool 0.11.3 - Remote Command Execution (RCE)ExploitDB exploitby Eui Chul ChungNot analyzed1 file
References
3github.com
https://github.com/dos-m0nk3y/CVE/tree/main/CVE-2024-50672 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-50672