PT-2022-11619 · Caldera · Debrief Plugin+1

Published 2022-01-12 · Updated 2022-01-15 · CVE-2021-42560

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CALDERA version 2.9.0

Description An issue was discovered in the Debrief plugin of CALDERA, where it receives base64 encoded "SVG" parameters when generating a PDF document. These SVG documents are parsed in an unsafe manner, which can be leveraged for XXE attacks, including File Exfiltration, Server Side Request Forgery, and Out of Band Exfiltration.

Recommendations For CALDERA version 2.9.0, consider disabling the Debrief plugin until a patch is available to prevent XXE attacks. Restrict access to the Debrief plugin to minimize the risk of exploitation. Avoid using the Debrief plugin for generating PDF documents with base64 encoded "SVG" parameters until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2021-42560

Affected Products

Caldera

Debrief Plugin

References · 6

• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42560-Unsafe%20XML%20Parsing-MITRE%20Caldera · Exploit
• https://osv.dev/vulnerability/CVE-2021-42560 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42560 · Security Note
• https://github.com/mitre/caldera/releases · Note
• https://t.me/cvenotify/25521 · Telegram Post
• https://t.me/cibsecurity/35372 · Telegram Post