CVE-2021-39174

Katalog CVE

CVSS 8.8 · High EPSS 5,0%

Kerentanan Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) pada catchethq catchet. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges (User or Admin), can leak the value of any configuration entry of the dotenv file, e.g. the application secret (`APP_KEY`) and various passwords (email, database, etc). This issue was addressed in version 2.5.1 by improving `UpdateConfigCommandHandler` and preventing the use of nested variables in the resulting dotenv configuration file. As a workaround, only allow trusted source IP addresses to access to the administration dashboard.

Rincian

Terbit di NVD

28 Agustus 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-75: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

EPSS (30 hari)

5,0% peluang dieksploitasi; lebih tinggi dari 92,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/ exploit · advisory pihak ketiga
• https://github.com/fiveai/Cachet/releases/tag/v2.5.1 release notes · advisory pihak ketiga
• https://github.com/fiveai/Cachet/security/advisories/GHSA-88f9-7xxh-c688 advisory pihak ketiga