CRITICAL🇵🇱 Wersja polska

CVE-2021-21242

CVSS 10.0v3.1pub. 2021-01-15upd. 2024-11-21

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which can lead to pre-auth remote code execution. AttachmentUploadServlet deserializes untrusted data from the `Attachment-Support` header. This Servlet does not enforce any authentication or authorization checks. This issue may lead to pre-auth remote code execution. This issue was fixed in 4.0.3 by removing AttachmentUploadServlet and not using deserialization

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

  • Onedev Project Onedev

    APP
    Onedev Project
    < 4.0.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEDeserialization
CWE
References

Related vulnerabilities

CVE-2022-39206CRITICAL9.9PL ✓same product

OneDev: ucieczka z kontenera Docker i przejęcie hosta przez CI/CD

CVE-2022-39205CRITICAL9.0PL ✓same product

OneDev: Pominięcie uwierzytelnienia prowadzące do RCE przez endpoint git callback

CVE-2021-21245CRITICAL10.0PL ✓same product

OneDev: Dowolne przesyłanie plików przez AttachmentUploadServlet

CVE-2021-21247CRITICAL9.6PL ✓same product

OneDev — zdalne wykonanie kodu przez deserializację danych AJAX (post-auth RCE)

CVE-2021-21244CRITICAL10.0PL ✓same product

Pre-auth Server Side Template Injection w OneDev (przed 4.0.3)