CyberRota Analysis
AI-GeneratedCentreStack versions prior to 17.4 are vulnerable to a SQL injection flaw that allows authenticated attackers to execute arbitrary SQL statements via a crafted x-glad-filter request header through the jsondir API endpoint. This vulnerability can lead to remote code execution by enabling attackers to write arbitrary files to the server filesystem using PostgreSQL functions. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized interpolation of the Field parameter directly into SQL query strings to write arbitrary files to the server filesystem via PostgreSQL lo_from_bytea() and lo_export() functions, enabling remote code execution.