Vulnerability · Published Aug 27, 2021 · Assigned by GitHub_M

CVE-2021-39173Forced reinstall

High 8.8

In plain English

A high-severity security flaw in Cachet from fiveai. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.4% (higher than 84% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)2.4%top 16.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Cachet is an open source status page system. Prior to version 2.5.1 authenticated users, regardless of their privileges (User or Admin), can trick Cachet and install the instance again, leading to arbitrary code execution on the server. This issue was addressed in version 2.5.1 by improving the middleware `ReadyForUse`, which now performs a stricter validation of the instance name. As a workaround, only allow trusted source IP addresses to access to the administration dashboard.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	cachethq/cachet	2.5.1	GHSA-r67m-m8c7-jp83

Affected products (as reported)

Vendor	Product	Versions
fiveai	Cachet	< 2.5.1

Weakness: CWE-704 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://github.com/fiveai/Cachet/releases/tag/v2.5.1 x_refsource_MISC
https://github.com/fiveai/Cachet/security/advisories/GHSA-r67m-m8c7-jp83 x_refsource_CONFIRM
https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/ x_refsource_MISC