CVE-2025-25286CWE-150CWE-157

Crayfish allows Remote Code Execution via Homarus Authorization header

Critical · published February 13, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
61.2
In the wild
Unconfirmed
What it is

🔥 Remote code execution at the hands of an attacker using the `/convert` endpoint? That’s a serious wake-up call! Think of this like a restaurant where anyone can walk in and place an order without verifying their identity. If they can request any dish, they can end up poisoning the entire menu! This vulnerability allows malicious requests that could lead to severe compromises if the Homarus microservice is publicly accessible. An attacker could exploit this vulnerability to run any command on your server, leading to data breaches, unauthorized access, and complete control over your system. Imagine the absolute devastation of losing sensitive information or worse, having your entire service taken hostage!

Put simply

Think of this like a restaurant where anyone can walk in and place an order without verifying their identity. If they can request any dish, they can end up poisoning the entire menu! This vulnerability allows malicious requests that could lead to severe compromises if the Homarus microservice is publicly accessible. This vulnerability in Crayfish's Homarus microservice allows remote code execution due to improper validation of requests at the `/convert` endpoint. If an attacker sends a crafted request, they could execute arbitrary commands on the server.

What to do

An attacker could exploit this vulnerability to run any command on your server, leading to data breaches, unauthorized access, and complete control over your system. Imagine the absolute devastation of losing sensitive information or worse, having your entire service taken hostage! To safeguard your system, upgrade to `islandora/crayfish:4.1.0` immediately. Additionally, ensure that your Homarus microservice is not accessible from the Internet, and strengthen authentication requirements to reject unauthorized requests before they reach the risky code. You've got this! With these updates, you’ll be reinforcing your defenses in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01024 · 61.2th percentile
Weaknesses
CWE-150 · Improper Neutralization of Escape, Meta, or Control Sequences; CWE-157 · Failure to Sanitize Paired Delimiters
Published
2025-02-13T00:36Z
EPSS history
Timeline
  • 13 FEB 00:36Z
    Crayfish allows Remote Code Execution via Homarus Authorization header
    cvelistv5