Lucene search
PRIOn knowledge basePRION:CVE-2021-25294HistoryJan 18, 2021 - 6:15 a.m.
Remote code execution
2021-01-1806:15:00
PRIOn knowledge base
www.prio-n.com
2
OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution. This occurs because lib/DataGrid.php calls unserialize for the parametersactivity:ActivityDataGrid parameter. The PHP object injection exploit chain can leverage an __destruct magic method in guzzlehttp.
| CPE | Name | Operator | Version |
|---|---|---|---|
| opencats | eq | <= 0.9.5-3 |
Related
cve
cve
CVE-2021-25294
2021-01-18 06:15:12
cvelist
cvelist
CVE-2021-25294
2021-01-18 05:28:37
checkpoint_advisories
checkpoint_advisories
OpenCATS Remote Code Execution (CVE-2021-25294)
2021-02-01 00:00:00
nvd
nvd
CVE-2021-25294
2021-01-18 06:15:12
osv
osv
CVE-2021-25294
2021-01-18 06:15:12