CVE-2021-37840

aaPanel through 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at a ws:// URL for /webssh (the victim must have configured Terminal with at least one host). Successful exploitation depends on the browser used by a potential victim (e.g., exploitation can occur with Firefox but not Chrome).

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

1.68% chance of exploitation in the next 30 days, 75th percentile

Published

2021-08-02

Updated

2024-08-04

Proof-of-concept exploits (1)

• aaPanel/aaPanel/issues/74

References

• CVE Record
• NVD entry

Related

• CVE-2021-37833
• CVE-2021-3785
• CVE-2021-37832
• CVE-2021-37859
• CVE-2021-37823
• CVE-2021-37866