Lucene search

GoogleOSV:CVE-2023-50094

HistoryJan 01, 2024 - 6:15 p.m.

CVE-2023-50094

2024-01-0118:15:09

Google

osv.dev

rengine

command injection

waf_detector

os command

root execution

software

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.4%

JSON

reNgine through 2.0.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/waf_detector/?url= string. The commands are executed as root via subprocess.check_output.

CPENameOperatorVersion
rengineeq1.3.0
rengineeq1.1.0
rengineeq1.3.6
rengineeq2.0.1
rengineeq0.1
rengineeq0.5
rengineeq1.3.4
rengineeq1.2.0
rengineeq0.3
rengineeq1.3.1

Name	Operator	Version
rengine	eq	1.3.0
rengine	eq	1.1.0
rengine	eq	1.3.6
rengine	eq	2.0.1
rengine	eq	0.1
rengine	eq	0.5
rengine	eq	1.3.4
rengine	eq	1.2.0
rengine	eq	0.3
rengine	eq	1.3.1

Rows per page:

1-10 of 191

References

github.com/yogeshojha/rengine/blob/5e120bd5f9dfbd1da82a193e8c9702e483d38d22/web/api/views.py#L195

github.com/yogeshojha/rengine/releases

github.com/yogeshojha/rengine/security

www.mattz.io/posts/cve-2023-50094/

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.4%

JSON

Related for OSV:CVE-2023-50094