cve/2021/CVE-2021-21242.md

CVE-2021-21242

Description

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which can lead to pre-auth remote code execution. AttachmentUploadServlet deserializes untrusted data from the Attachment-Support header. This Servlet does not enforce any authentication or authorization checks. This issue may lead to pre-auth remote code execution. This issue was fixed in 4.0.3 by removing AttachmentUploadServlet and not using deserialization

POC

Reference

• https://github.com/theonedev/onedev/security/advisories/GHSA-5q3q-f373-2jv8

Github

• https://github.com/EdgeSecurityTeam/Vulnerability
• https://github.com/tzwlhack/Vulnerability