CVE-2020-10807

CVE-2020-10807 concerns Caldera’s auth_svc before 2.6.5, where authentication can be bypassed for REST API requests by forging the HTTP Host header to include a localhost string. The issue is mitigated by upgrading to Caldera 2.6.5 or later, which addresses the authentication bypass vulnerability...

CVE-2021-42559

CVE-2021-42559 : CALDERA 2.8.1 and earlier contains multiple startup “requirements” that execute commands when starting the server. The commands can be modified via the REST API, allowing an authenticated user to insert arbitrary commands that will execute on restart. This is a command-injection ...

CVE-2021-42561

CVE-2021-42561 affects CALDERA 2.8.1 where the Human plugin passes an unsanitized name parameter to Python os.system, enabling shell metacharacters to escape commands and execute arbitrary code. Multiple vendors and advisories (Red Hat, CNVD, OSV, CVE lists) corroborate a command-injection vulner...

CVE-2021-42562

CVE-2021-42562 affects CALDERA 2.8.1 with an improper privilege separation, allowing non-admin users to read/modify configurations or other admin-only components. This description is corroborated by multiple connected sources (e.g., CNVD-2022-08044). No explicit remediation or patch details are p...

CVE-2021-42560

CALDERA 2.9.0 Debrief plugin accepts base64-encoded SVG parameters when generating PDFs. The SVGs are parsed unsafely, enabling XXE-style attacks that can lead to file exfiltration, server-side requests, or out-of-band exfiltration. No explicit exploit details or affected subversions beyond CALDE...

CVE-2022-40605

CVE-2022-40605 (MITRE CALDERA) affects MITRE CALDERA before 4.1.0, with an XSS exposure in the Operations tab and/or Debrief plugin triggered by a crafted operation name. The description indicates a separate vulnerability from CVE-2022-40606. The connected sources reiterate the same issue and not...

CVE-2022-40606

CVE-2022-40606 affects MITRE CALDERA prior to 4.1.0. The vulnerability is an XSS in the Operations tab and/or Debrief plugin triggered by a crafted operation name. The connected documents corroborate the same description and reference Caldera 4.1.0 release, but do not provide explicit remediation...

CVE-2022-41139

CVE-2022-41139 affects MITRE CALDERA (version 4.1.0). The vulnerability is a stored XSS via the app.contact.gist field (gist contact configuration), which can lead to execution of arbitrary commands on agents. Public references consistently describe this as a stored XSS issue in CALDERA 4.1.0. Th...

CVE-2020-19907

The CVE-2020-19907 entry describes a command-injection vulnerability in the sandcat plugin of Caldera versions 2.3.1 and earlier . The root cause is not elaborated beyond the vulnerable plugin allowing an authenticated attacker to execute arbitrary commands or services. Impact is scoped to an aut...

CVE-2021-42558

CVE-2021-42558 affects CALDERA 2.8.1, with multiple reflected, stored, and self XSS vulnerabilities exploitable by authenticated and unauthenticated attackers. Some vectors may require valid user credentials; one XSS vector was reportedly fixed in a Caldera commit referenced in a related exploit ...

CVE-2020-14462

CVE-2020-14462 concerns CALDERA 2.7.0 with a cross-site scripting (XSS) vulnerability in the WEB application, arising from lack of proper validation of client-side data in the Operation Name box. Multiple connected sources (CNVD-2021-22479, RH: Red Hat, NVD, OSV, CNVD) describe it as a Caldera XS...