CVE-2023-50094

    Dashboard / Vulnerabilities / CVE-2023-50094

    CVE-2023-50094

    Published: 1 Jan 2024Last Modified: 28 Oct 2026

    Summary:

    Details: reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/waf_detector/?url= string. The commands are executed as root via subprocess.check_output.

    References: https://github.com/yogeshojha/rengine/blob/53d9f505f04861a5040195ea71f20907ff90577a/web/api/views.py#L268-L275, https://github.com/yogeshojha/rengine/blob/5e120bd5f9dfbd1da82a193e8c9702e483d38d22/web/api/views.py#L195, https://github.com/yogeshojha/rengine/security, https://www.mattz.io/posts/cve-2023-50094/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50094.json, https://github.com/yogeshojha/rengine/security/advisories/GHSA-fx7f-f735-vgh4, https://nvd.nist.gov/vuln/detail/CVE-2023-50094, https://github.com/yogeshojha/rengine/commit/3d5f1724dd12cf9861443742e7d7c02ff8c75a6f, https://github.com/yogeshojha/rengine/commit/edd3c85ee16f93804ad38dac5602549d2d30a93e, https://github.com/yogeshojha/rengine/releases

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -3d5f1724dd12cf9861443742e7d7c02ff8c75a6f

    Affected versions

    v2.1.1
    v2.1.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-50094 | CVE-DB