CVE-2021-39165

CVE-2021-39165 describes an unauthenticated SQL injection vulnerability in Cachet, an open-source status page, affecting versions up to and including 2.3.18. This flaw allows attackers to exfiltrate sensitive database information, such as administrator passwords and session data, due to a weakness in the SearchableTrait#scopeSearch() function. Rated 6.5 MEDIUM on CVSS, the vulnerability has a low attack complexity and high confidentiality impact, with an EPSS score indicating a high likelihood of exploitation. While there is no evidence of active exploitation or Metasploit modules, Nuclei templates exist, and despite its high FAUCET Risk Score, there is minimal community discussion or media coverage.