CVE-2020-11016
IntelMQ Manager from version 1.1.0 and before version 2.1.1 has a vulnerability where the backend incorrectly handled messages given by user-input in the "send" functionality of the Inspect-tool of the Monitor component.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.33%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
IntelMQ Manager from version 1.1.0 and before version 2.1.1 has a vulnerability where the backend incorrectly handled messages given by user-input in the "send" functionality of the Inspect-tool of the Monitor component. An attacker with access to the IntelMQ Manager could possibly use this issue to execute arbitrary code with the privileges of the webserver. Version 2.1.1 fixes the vulnerability.
- CVSS 3.1
- 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 2.33% probability · 83th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-78
- Affected
- intelmq manager project/intelmq manager
- Source
- security-advisories@github.com
References
- https://github.com/certtools/intelmq-manager/commit/b9a2ac43a4f99d764b827108f6a99dc4a9faa013Patch, Third Party Advisory
- https://github.com/certtools/intelmq-manager/releases/tag/2.1.1Third Party Advisory
- https://github.com/certtools/intelmq-manager/security/advisories/GHSA-rrhh-rcgp-q2m2Patch, Third Party Advisory
- https://lists.cert.at/pipermail/intelmq-users/2020-April/000161.htmlThird Party Advisory
- https://github.com/certtools/intelmq-manager/commit/b9a2ac43a4f99d764b827108f6a99dc4a9faa013Patch, Third Party Advisory
- https://github.com/certtools/intelmq-manager/releases/tag/2.1.1Third Party Advisory
- https://github.com/certtools/intelmq-manager/security/advisories/GHSA-rrhh-rcgp-q2m2Patch, Third Party Advisory
- https://lists.cert.at/pipermail/intelmq-users/2020-April/000161.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.