CVE-2021-23259

Authenticated users with Administrator or Developer roles may execute OS commands by Groovy Script which uses Groovy lib to render a webpage. The groovy script does not have security restrictions, which will cause attackers to execute arbitrary commands remotely(RCE).

CVSS v3 4.2 MEDIUM
CVSS v2.0 6.5 MEDIUM

4.2^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.5 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120102	Vendor Advisory
https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120102	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:craftercms:crafter_cms:*:*:*:*:*:*:*:*

History

21 Nov 2024, 05:51

Type	Values Removed	Values Added
CVSS	v2 : ~~6.5~~ v3 : ~~7.2~~	v2 : 6.5 v3 : 4.2
References	~~() https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120102 - Vendor Advisory~~	() https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120102 - Vendor Advisory

Information

Published : 2021-12-02 16:15

Updated : 2024-11-21 05:51

NVD link : CVE-2021-23259

Mitre link : CVE-2021-23259

CVE.ORG link : CVE-2021-23259

JSON object : View

Products Affected

craftercms

crafter_cms

CWE

CWE-913

Improper Control of Dynamically-Managed Code Resources

{"id": "CVE-2021-23259", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "security@craftersoftware.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.2, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 0.5}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2021-12-02T16:15:07.513", "references": [{"url": "https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120102", "tags": ["Vendor Advisory"], "source": "security@craftersoftware.com"}, {"url": "https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120102", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security@craftersoftware.com", "description": [{"lang": "en", "value": "CWE-913"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-913"}]}], "descriptions": [{"lang": "en", "value": "Authenticated users with Administrator or Developer roles may execute OS commands by Groovy Script which uses Groovy lib to render a webpage. The groovy script does not have security restrictions, which will cause attackers to execute arbitrary commands remotely(RCE)."}, {"lang": "es", "value": "Los usuarios autenticados con roles de Administrador o Desarrollador pueden ejecutar comandos del sistema operativo mediante el Script Groovy que usa Groovy lib para renderizar una p\u00e1gina web. El script groovy no presenta restricciones de seguridad, lo que causar\u00e1 que atacantes ejecuten comandos arbitrarios de forma remota (RCE)"}], "lastModified": "2024-11-21T05:51:27.207", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:craftercms:crafter_cms:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6B0250B-7A80-4E49-9502-808764EAFAA7", "versionEndExcluding": "3.1.12", "versionStartIncluding": "3.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@craftersoftware.com"}