Vulnerability · Published Jun 23, 2023 · Assigned by mitre
CVE-2023-30258
Critical 9.8
In plain English
A critical-severity command injection in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 94.2% (higher than 99.9% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei, public proof-of-concept code.
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)94.2%top 0.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling3Metasploit, Nuclei, Public PoC
Official description
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.
Affected products (as reported)
Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://eldstal.se/advisories/230327-magnusbilling.html
- https://github.com/magnussolution/magnusbilling7/commit/ccff9f6370f530cc41ef7de2e31d7590a0fdb8c3
- http://packetstormsecurity.com/files/175672/MagnusBilling-Remote-Command-Execution.html
- https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-30258.md