Cachet
Monthly
Remote code execution in Cachet through version 2.4.1 allows authenticated low-privilege users to inject Blade directives or Twig-style filters into incident templates, which are interpreted and executed as arbitrary PHP by the server when incidents are rendered. Any account with permission to create or edit incident templates can run OS commands as the web server process, yielding full compromise of the hosting environment. A publicly available proof-of-concept has been confirmed by VulnCheck and the upstream GitHub issue; no active exploitation has been recorded in CISA KEV at time of analysis.
Cachet, the open-source status page system. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Cachet is an open source status page. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This SQL Injection vulnerability could allow attackers to execute arbitrary SQL commands against the database.
Remote code execution in Cachet through version 2.4.1 allows authenticated low-privilege users to inject Blade directives or Twig-style filters into incident templates, which are interpreted and executed as arbitrary PHP by the server when incidents are rendered. Any account with permission to create or edit incident templates can run OS commands as the web server process, yielding full compromise of the hosting environment. A publicly available proof-of-concept has been confirmed by VulnCheck and the upstream GitHub issue; no active exploitation has been recorded in CISA KEV at time of analysis.
Cachet, the open-source status page system. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Cachet is an open source status page. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This SQL Injection vulnerability could allow attackers to execute arbitrary SQL commands against the database.