OpenCATS up to 0.9.4 Careers Job Application Endpoint missing authentication

Summaryinfo

A vulnerability was found in OpenCATS up to 0.9.4 and classified as critical. This impacts an unknown function of the component Careers Job Application Endpoint. Such manipulation leads to missing authentication. This vulnerability is uniquely identified as CVE-2021-47936. The attack can be launched remotely. Moreover, an exploit is present.

Detailsinfo

A vulnerability was found in OpenCATS up to 0.9.4. It has been rated as critical. Affected by this issue is an unknown code of the component Careers Job Application Endpoint. The manipulation with an unknown input leads to a missing authentication vulnerability. Using CWE to declare the problem leads to CWE-306. The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. Impacted is confidentiality, integrity, and availability. CVE summarizes:

OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by uploading malicious PHP files disguised as resume attachments. Attackers can upload PHP payloads through the careers job application endpoint and execute system commands via POST requests to the uploaded file in the upload directory.

The weakness was disclosed by Nicholas Ferreira as 50585. The advisory is shared for download at exploit-db.com. This vulnerability is handled as CVE-2021-47936 since 02/01/2026. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details are unknown but a public exploit is available.

The exploit is available at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Exploit-DB (50585) and CNNVD (CNNVD-202605-2040). Once again VulDB remains the best source for vulnerability data.

Productinfo

Name

• OpenCATS

Version

• 0.9.0
• 0.9.1
• 0.9.2
• 0.9.3
• 0.9.4

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion