CVE-2021-42560 PoC — Caldera 代码问题漏洞

Source

https://github.com/mbadanoiu/CVE-2021-42560

Associated Vulnerability

Title:Caldera 代码问题漏洞 (CVE-2021-42560)
Description:An issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded "SVG" parameters when generating a PDF document. These SVG documents are parsed in an unsafe manner and can be leveraged for XXE attacks (e.g., File Exfiltration, Server Side Request Forgery, Out of Band Exfiltration, etc.).

Description

CVE-2021-42560: Unsafe XML Parsing in MITRE Caldera

Readme

# CVE-2021-42560: Unsafe XML Parsing in MITRE Caldera

The Debrief plugin in Caldera (versions <=2.9.0) receives base64 encoded "SVG" parameters when generating a PDF. These SVG are parsed in an unsafe manner and can be leveraged for XXE attacks (e.g. File Exfiltration, Server-Side Request Forgery, Out of Band Exfiltration, etc.). 

### Vendor Disclosure:

The vendor's disclosure for this vulnerability can be found [here](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42560).

### Requirements:

This vulnerability requires:
<br/>
- Valid user credentials

### Proof Of Concept:

More details and the exploitation process can be found in this [PDF](https://github.com/mbadanoiu/CVE-2021-42560/blob/main/Caldera%20-%20CVE-2021-42560.pdf).

File Snapshot


 [4.0K]  /data/pocs/c295f06f1b412757e0d89a14ec867e1fe6a5ab44
├── [267K]  Caldera - CVE-2021-42560.pdf
└── [ 752]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!