CVE-2023-43661 Cachet vulnerable to Authenticated Remote Code Execution
Authenticated attackers can execute arbitrary code on the server via Cachet's template functionality due to improper filtration and outdated Twig version.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-43661?
CVE-2023-43661 is a critical code injection vulnerability in cachethq cachet, published on 11 Oct 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Cachet is an open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch contains a patch for this issue.
Which versions are affected by CVE-2023-43661?
2 open source packages ship an affected version, including cachethq/cachet. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
cachethq/cachet Packagist | All versions | 2.4 |
cachethq/cachet Packagist | All versions | 2.4 |
Products include All-Three Cachet.
How do I fix CVE-2023-43661?
Upgrade cachethq/cachet to 2.4 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2023-43661 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-43661 exists.
Sources
Also known as GHSA-hv79-p62r-wg3p.