PT-2021-23845 · Unknown · Iresturant

Published 2021-12-20 · Updated 2022-07-12 · CVE-2021-43439

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions iResturant version 1.0

Description The issue allows a remote attacker to execute commands remotely through the Add Review Function.

Recommendations For iResturant version 1.0, consider disabling the Add Review Function until a patch is available to prevent remote command execution.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-43439

Affected Products

Iresturant

References · 6

• 🔥 https://medium.com/@mayhem7999/cve-2021-43439-79c8ff1801fc · Exploit
• https://osv.dev/vulnerability/CVE-2021-43439 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43439 · Security Note
• https://github.com/MartDevelopers-Inc/iResturant · Note
• https://t.me/cibsecurity/34298 · Telegram Post
• https://medium.com/%40mayhem7999/cve-2021-43439-79c8ff1801fc · Note