PT-2021-22422 · Cachet · Cachet

Phith0N · Published 2021-08-26 · Updated 2022-03-18 · CVE-2021-39165

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cachet versions prior to 2.5

Description The issue is a SQL injection vulnerability located in the SearchableTrait#scopeSearch() function. This vulnerability can be exploited by attackers without authentication to exfiltrate sensitive data from the database, including administrator passwords and sessions.

Recommendations Update to version 2.5 or later in the https://github.com/fiveai/Cachet fork to fix this vulnerability. As a temporary workaround, consider restricting access to the SearchableTrait#scopeSearch() function until a patch is available.

Exploit

Fix

SQL injection

Improper Authentication

Weakness Enumeration

CWE-89

CWE-287

Related Identifiers

CVE-2021-39165

GHSA-79MG-4W23-4FQC

Affected Products

Cachet

References · 10

• 🔥 https://github.com/W0rty/CVE-2021-39165 · Exploit
• https://github.com/fiveai/Cachet/commit/27bca8280419966ba80c6fa283d985ddffa84bb6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-39165 · Security Note
• https://osv.dev/vulnerability/GHSA-79mg-4w23-4fqc · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-39165 · Vendor Advisory
• https://github.com/CachetHQ/Cachet · Note
• https://github.com/fiveai/Cachet/security/advisories/GHSA-79mg-4w23-4fqc · Note
• https://t.me/cibsecurity/27932 · Telegram Post
• https://t.me/ckure/10973 · Telegram Post
• https://t.me/cybersecuritytechnologies/4194 · Telegram Post