GitHub Advisoryadvisory · Maven

GHSA-hv53-q76c-7f8c OS Command Injection in OpenTSDB

CRITICAL Published 2021-08-02 Modified 2021-07-26 Official page ↗
Aliases
CVE-2020-35476
Ecosystem
Maven
Packages
net.opentsdb:opentsdb
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78
Reviewed
2021-07-26

Affected packages

• Maven net.opentsdb:opentsdb: <= 2.4.0 (no fix yet)

Description

A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. (tsd/GraphHandler.java attempted to prevent command injections by blocking backticks but this is insufficient.)

Related

Alias · CVE (1)

  • CVE-2020-35476 A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. vulnerability

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References