CVE-2023-43661

Cachet, the open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch contains a patch for this issue.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/cachethq/cachet/commit/6fb043e109d2a262ce3974e863c54e9e5f5e0587	Patch
https://github.com/cachethq/cachet/security/advisories/GHSA-hv79-p62r-wg3p	Exploit Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:all-three:cachet:*:*:*:*:*:*:*:*

History

18 Oct 2023, 02:02

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.8
References	~~(MISC) https://github.com/cachethq/cachet/commit/6fb043e109d2a262ce3974e863c54e9e5f5e0587 -~~	(MISC) https://github.com/cachethq/cachet/commit/6fb043e109d2a262ce3974e863c54e9e5f5e0587 - Patch
References	~~(MISC) https://github.com/cachethq/cachet/security/advisories/GHSA-hv79-p62r-wg3p -~~	(MISC) https://github.com/cachethq/cachet/security/advisories/GHSA-hv79-p62r-wg3p - Exploit, Mitigation, Vendor Advisory
CWE	~~CWE-94~~	CWE-74
CPE		cpe:2.3:a:all-three:cachet::::::::
First Time		All-three All-three cachet

11 Oct 2023, 21:04

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-10-11 20:15

Updated : 2024-02-28 20:33

NVD link : CVE-2023-43661

Mitre link : CVE-2023-43661

CVE.ORG link : CVE-2023-43661

JSON object : View

Products Affected

all-three

cachet

CWE

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2023-43661", "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.3, "exploitabilityScore": 3.1}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2023-10-11T20:15:10.787", "references": [{"url": "https://github.com/cachethq/cachet/commit/6fb043e109d2a262ce3974e863c54e9e5f5e0587", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/cachethq/cachet/security/advisories/GHSA-hv79-p62r-wg3p", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-74"}]}, {"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "Cachet, the open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch contains a patch for this issue."}, {"lang": "es", "value": "Cachet, el sistema de p\u00e1ginas de estado de c\u00f3digo abierto. Antes de la rama 2.4, tiene una funcionalidad de plantilla que permit\u00eda a los usuarios crear plantillas, les permit\u00eda ejecutar cualquier c\u00f3digo en el servidor durante la filtraci\u00f3n incorrecta y la versi\u00f3n antigua de twig. El commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 de la rama 2.4 contiene un parche para este problema."}], "lastModified": "2023-10-18T02:02:20.857", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:all-three:cachet:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B341A3F1-E791-4688-8C56-DFF77B4E9197", "versionEndExcluding": "2.4"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}