CVE-2021-39174: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges User or Admin, can leak the value of any configuration entry of the dotenv file, e.g. the application secret APPKEY and various passwords email, database, etc. This issue was...

PT-2021-22432 · Cachet · Cachet

Name of the Vulnerable Software and Affected Versions: Cachet versions prior to 2.5.1 Description: Cachet is an open source status page system. Authenticated users, regardless of their privileges, can leak the value of any configuration entry of the dotenv file, e.g. the application secret APP KE...

Command execution vulnerability in dotenv

dotenv is a library that enables Node.js to load environment variables from files. A command execution vulnerability exists in dotenv. An attacker can exploit this vulnerability to execute system commands...