Lucene search

PRIOn knowledge basePRION:CVE-2021-43609

HistoryNov 09, 2023 - 12:15 a.m.

Sql injection

2023-11-0900:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

spiceworks help desk server

authenticated attacker

arbitrary sql commands

remote code execution (rce)

deserialization

malicious data

9.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.0%

JSON

An issue was discovered in Spiceworks Help Desk Server before 1.3.3. A Blind Boolean SQL injection vulnerability within the order_by_for_ticket function in app/models/reporting/database_query.rb allows an authenticated attacker to execute arbitrary SQL commands via the sort parameter. This can be leveraged to leak local files from the host system, leading to remote code execution (RCE) through deserialization of malicious data.

CPENameOperatorVersion
help_desk_serverlt1.3.3

CPE	Name	Operator	Version
	help_desk_server	lt	1.3.3

References

community.spiceworks.com/blogs/help-desk-server-release-notes/3610-1-3-2-1-3-3

github.com/d5sec/CVE-2021-43609-POC

www.linkedin.com/pulse/cve-2021-43609-write-up-division5-security-4lgwe