CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup.

restoreConfigBlob() feeds the database dump in a backup to the sqlite3 command-line shell. The shell runs lines starting with a dot as its own commands, so .shell or .system in the dump runs an OS command and .load loads native code.

Anyone who can supply a backup to be restored can run arbitrary commands as the application user.

Üreticinin çözüm notu (İngilizce)

Upgrade to CallBackery 0.62.0 or later.

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• metacpan.org/release/OETIKER/CallBackery-0.62.0/changes Diğer

Kayıt geçmişi

1. 30 Eki 2026 22:30CVSS puanı değişti: – → 8.4
2. 30 Eki 2026 16:11Yayımlandı

İlgili açıklar

• 9,9 CVE-2026-62853ThingLinks vulnerable to authenticated remote code execution via Groovy script registration in ThingLinks
• 7,8 CVE-2026-119335Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypass
• 9,9 CVE-2026-116241pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier
• 7,0 CVE-2026-119288Zuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-parses the command line
• 8,8 CVE-2026-119713Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands
• 7,2 CVE-2026-118238CVE-2026-118238