CVE-2020-35847

2020-12-3000:00:00

attackerkb.com

agentejo cockpit

nosql injection

resetpassword function

controller/auth.php

cve-2020-35847

password reset tokens

EPSS

0.878

Percentile

98.7%

JSON

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.

Recent assessments:

h00die at May 31, 2021 12:11pm UTC reported:

Similar to CVE-2020-35846, this is a noSQL injection using the var_dump function to dump all memory for the password reset tokens. The vulnerability is within the /auth/requestreset When combined with CVE-2020-35846, its possible to dump all users and their password reset tokens. With this, a successful password reset of the admin user is possible. Once logged in, using the /accounts/find API, a command injection vulnerability is achieved although there was no CVE assigned to this.

Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0