CVE-2018-5955 : An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unau

An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI.

Published 2018-01-21 22:29:00

Updated 2019-03-06 17:27:46

Source MITRE

View at NVD, CVE.org

Vulnerability category: Input validation

Exploit prediction scoring system (EPSS) score for CVE-2018-5955

EPSS FAQ

96.36%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2018-5955

GitStack Unauthenticated REST API Requests

Disclosure Date: 2018-01-15

First seen: 2020-04-26

auxiliary/admin/http/gitstack_rest

This modules exploits unauthenticated REST API requests in GitStack through v2.3.10. The module supports requests for listing users of the application and listing available repositories. Additionally, the module can create a user and add the user to the appli

More information
GitStack Unsanitized Argument RCE

Disclosure Date: 2018-01-15

First seen: 2020-04-26

exploit/windows/http/gitstack_rce

This module exploits a remote code execution vulnerability that exists in GitStack through v2.3.10, caused by an unsanitized argument being passed to an exec function call. This module has been tested on GitStack v2.3.10. Authors: - Kacper Szurek - Jacob R

More information

CVSS scores for CVE-2018-5955

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-5955

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-5955

https://blogs.securiteam.com/index.php/archives/3557

SSD Advisory – GitStack Unauthenticated Remote Code Execution - SSD Secure Disclosure
Exploit;Third Party Advisory
https://www.exploit-db.com/exploits/44356/

GitStack - Unsanitized Argument Remote Code Execution (Metasploit)
Exploit;Third Party Advisory;VDB Entry

Products affected by CVE-2018-5955

Smartmobilesoftware » Gitstack
Versions up to, including, (<=) 2.3.10
cpe:2.3:a:smartmobilesoftware:gitstack:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2018-5955