CVE-2013-2121Foreman Code Injection
Foreman: app/controllers/bookmarks_controller.rb remote code execution
Published Jun 7, 2013 · Updated Aug 6, 2024
Key Facts
Routine patching- CVE-2013-2121 is a medium-severity vulnerability (CVSS 6.0 v2) affecting Openstack (Redhat), Foreman (Theforeman), ruby193-foreman (redhat) and 6 more products.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 25% probability of exploitation in the next 30 days.
- Fixed versions are available, including Foreman 0:1.6.0.44-1.el6sat, Foreman 1.2.0, ruby193-foreman 0:1.1.10009-3.el6ost.
- Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.
Scores
CVSS v2
6.0
AV:N/AC:M/Au:S/C:P/I:P/A:P
EPSS (30-day exploit likelihood)
25%
Higher than 97.8% of all scored CVEs
Exploit maturity
Weaponized
ATLAS score
49/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Weaponized
Public exploit code
3
Proof-of-concept links
In-the-wild evidence
1
Reports of active use
Advisories And Exploit References
- advisoryRHEA-2014:1175
- advisoryRHSA-2013:0995
Description
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute.
Affected Products
11 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| OpenstackRedhat | 3.0 | n/a |
| ForemanTheforeman | 1.1 | 1.2.0 |
| ruby193-foremanredhat | See advisory | 0:1.1.10009-3.el6ost |
| ruby193-foreman-proxyredhat | See advisory | 0:1.1.10001-4.el6ost |
| ruby193-openstack-foreman-installerredhat | See advisory | 0:0.0.18-1.el6ost |
Patched Releases
Foreman
0:1.6.0.44-1.el6sat, 1.2.0
ruby193-foreman
0:1.1.10009-3.el6ost
ruby193-foreman-proxy
0:1.1.10001-4.el6ost
ruby193-openstack-foreman-installer
0:0.0.18-1.el6ost
ruby193-rubygem-ancestry
0:1.3.0-5.el6ost
ruby193-rubygem-fog
0:1.10.1-11.el6ost
ruby193-rubygem-mysql
0:2.8.1-4.el6ost
ruby193-rubygem-safemode
0:1.2.0-9.el6ost
Timeline
Publicly disclosed
Jun 7, 2013
Last updated
Aug 6, 2024
Weakness Type
- CWE-94 Improper Control of Generation of Code ('Code Injection')
- CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
References
- advisoryRHEA-2014:1175
- advisoryRHSA-2013:0995
- exploitbugzilla.redhat.com · show_bug.cgi
- exploitMSF foreman_openstack_satellite_code_exec.rb
- exploitExploitDB-27045
FAQ
Common Questions.
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute.
Affected: Openstack (Redhat) versions 3.0; Foreman (Theforeman) versions 1.1; ruby193-foreman (redhat), among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Foreman 0:1.6.0.44-1.el6sat, Foreman 1.2.0, ruby193-foreman 0:1.1.10009-3.el6ost.
Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.
Is CVE-2013-2121 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo