CyberRota Analysis
AI-GeneratedThe Horde Virtual File System (VFS) API is vulnerable to OS command injection due to insufficient sanitization in the Horde_Vfs_Smb driver, allowing authenticated attackers to execute arbitrary shell commands via user-controlled filenames. This vulnerability can be exploited through file operations such as uploads or renames, leading to potential system compromise. Organizations using this API, particularly those with authentication mechanisms in place, should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Horde Virtual File System (VFS) API before 3.0.1 contains an OS command injection vulnerability in the Horde_Vfs_Smb driver where the _escapeShellCommand() method fails to sanitize command substitution sequences, allowing authenticated attackers to inject arbitrary shell commands through user-controlled filenames. Attackers can supply malicious filenames containing unescaped command substitution payloads through operations such as file upload, folder creation, rename, or deletion, which are interpolated into a double-quoted shell context and executed via proc_open() through /bin/sh -c before smbclient runs, resulting in arbitrary command execution on the underlying system.