CVE-2021-32305 — AI Deep Analysis Summary

🚨 **Essence**: Remote Command Injection in WebSVN. 📉 **Consequences**: Attackers can execute arbitrary OS commands via the search parameter. 💥 **Impact**: Full system compromise via shell metacharacters.

🛡️ **CWE**: CWE-78 (OS Command Injection). 🔍 **Flaw**: Lack of input sanitization in the `search.php` parameter. ⚠️ **Root**: Shell metacharacters are passed directly to the OS.

📦 **Product**: WebSVN (Online Subversion Repository Browser). 📅 **Affected**: Versions **before 2.6.1**. 🚫 **Fixed**: Version 2.6.1 and later.

👑 **Privileges**: Runs with the web server's privileges (e.g., `www-data`). 💾 **Data**: Can read/write files, steal repo data, or pivot to internal networks. 🖥️ **Action**: Full remote code execution (RCE).

🔓 **Auth**: Likely **Low/None**. The search function is often public. 🌐 **Access**: Remote attackers can trigger it via HTTP requests. 🎯 **Ease**: Simple payload injection.

💣 **Public Exp**: **Yes**. Multiple PoCs exist on GitHub (e.g., `CVE-2021-32305.py`). 🚀 **Wild Exp**: High risk. Nuclei templates available for mass scanning. 📜 **Proof**: Reverse shell payloads demonstrated.

🔍 **Check**: Scan for `search.php` with shell metacharacters (e.g., `;`, `|`, `&`). 📡 **Tool**: Use Nuclei or Burp Suite to test injection. 🏷️ **Indicator**: Look for WebSVN version < 2.6.1.

✅ **Fixed**: Yes. Upgrade to **WebSVN 2.6.1**. 📥 **Patch**: Pull request #142 merged into official repo. 🔄 **Action**: Immediate update recommended.

🛡️ **Workaround**: If unpatchable, restrict access to `search.php` via WAF or firewall. 🚫 **Block**: Filter shell metacharacters in input parameters. 🧱 **Isolate**: Limit web server permissions to minimize damage.

🔥 **Priority**: **CRITICAL**. 🚨 **Urgency**: High. RCE allows immediate takeover. ⏳ **Time**: Patch immediately. No auth needed makes it easy to exploit.