This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis →
Q1What is this vulnerability? (Essence + Consequences)
🚨 **Essence**: Agentejo Cockpit CMS suffers from a **NoSQL Injection** flaw in the `Auth.php` controller's check function.…
📦 **Affected**: **Agentejo Cockpit CMS**. <br>📉 **Versions**: All versions **prior to 0.11.2** (e.g., 0.11.1 and earlier). <br>🌍 **Context**: A German-based CMS for managing structured website content.
Q4What can hackers do? (Privileges/Data)
🕵️ **Attacker Actions**: <br>1. **Leak Usernames**: Dump all user accounts via NoSQL injection. <br>2. **Bypass Auth**: Log in without valid credentials. <br>3.…
⚠️ **Threshold**: **Low to Medium**. <br>🔑 **Auth**: The vulnerability exists in the authentication check function (`Auth.php`), meaning it can often be triggered during login attempts or API calls without prior authenti…
💣 **Public Exploits**: **YES**. <br>🔗 **PoCs Available**: <br>- Python script by John Hammond to leak usernames. <br>- Full exploit by `0z09e` demonstrating NoSQL Injection to RCE.…
🔍 **Self-Check**: <br>1. **Scan**: Use Nuclei templates (`CVE-2020-35846.yaml`) to detect the vulnerability. <br>2. **Verify**: Check your Cockpit version in the admin panel. If it is `< 0.11.2`, you are vulnerable.…
✅ **Official Fix**: **YES**. <br>🔧 **Patch**: Released in **Cockpit 0.11.2**. <br>📝 **Commit**: Fixed via commits `33e7199` and `79fc963` by Agentejo. <br>👉 **Action**: Upgrade immediately to 0.11.2 or later.
Q9What if no patch? (Workaround)
🚧 **No Patch Workaround**: <br>1. **Update ASAP**: The only true fix is upgrading. <br>2. **WAF**: Deploy a Web Application Firewall to block NoSQL injection patterns (e.g., `$eq`, `$ne`). <br>3.…
🔥 **Urgency**: **CRITICAL**. <br>📅 **Priority**: **P1 - Immediate Action Required**. <br>💡 **Reason**: Public exploits exist, RCE is possible, and it affects authentication. Do not wait!…