Vulnerability Details : CVE-2023-25826

Public exploit exists!
Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple parameters and execute malicious code on the OpenTSDB host system. This exploit exists due to an incomplete fix that was made when this vulnerability was previously disclosed as CVE-2020-35476. Regex validation that was implemented to restrict allowed input to the query API does not work as intended, allowing crafted commands to bypass validation.
Published 2023-05-03 19:15:09
Updated 2025-02-13 17:16:11
Source Synopsys
View at NVD,   CVE.org

Products affected by CVE-2023-25826

Exploit prediction scoring system (EPSS) score for CVE-2023-25826

EPSS FAQ
83.15%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2023-25826

  • OpenTSDB 2.4.1 unauthenticated command injection
    Disclosure Date: 2023-07-01
    First seen: 2023-09-11
    exploit/linux/http/opentsdb_key_cmd_injection
    This module exploits an unauthenticated command injection vulnerability in the key parameter in OpenTSDB through 2.4.1 (CVE-2023-36812/CVE-2023-25826) in order to achieve unauthenticated remote code execution as the root user. The module first atte

CVSS scores for CVE-2023-25826

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
9.8
 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.9
5.9
 Synopsys
9.8
 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.9
5.9
 NIST

CWE ids for CVE-2023-25826

References for CVE-2023-25826

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close