Nickguitar / RevCAT

OpenCATS <= 0.9.4 RCE (CVE-2021-41560)

RevCAT

OpenCATS <= 0.9.4 RCE (CVE-2021-41560)

Opencats <= 0.9.4 fails to properly validade file upload, leading to remote code execution.

If your installed version is <= 0.9.4, apply the patch asap.

Usage

./RevCAT.sh <target URL>

Note: <target URL> must point to the root path where OpenCATS is installed.

Screenshots