Lucene search

MitreCVELIST:CVE-2021-43609

HistoryNov 08, 2023 - 12:00 a.m.

CVE-2021-43609

2023-11-0800:00:00

mitre

www.cve.org

spiceworks help desk server

sql injection

remote code execution

deserialization

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

71.0%

JSON

An issue was discovered in Spiceworks Help Desk Server before 1.3.3. A Blind Boolean SQL injection vulnerability within the order_by_for_ticket function in app/models/reporting/database_query.rb allows an authenticated attacker to execute arbitrary SQL commands via the sort parameter. This can be leveraged to leak local files from the host system, leading to remote code execution (RCE) through deserialization of malicious data.

References

community.spiceworks.com/blogs/help-desk-server-release-notes/3610-1-3-2-1-3-3

github.com/d5sec/CVE-2021-43609-POC

www.linkedin.com/pulse/cve-2021-43609-write-up-division5-security-4lgwe

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

0.003 Low

EPSS

Percentile

71.0%

JSON

Related for CVELIST:CVE-2021-43609