CVE-2021-39173

CVE-2021-39173 is a critical vulnerability affecting Cachet, an open-source status page system, prior to version 2.5.1. Authenticated users, regardless of their privilege level, can exploit a flaw in the reinstallation process to achieve arbitrary code execution on the server. This vulnerability carries a CVSS score of 8.8 (High), indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability. While no public exploit code (Metasploit, Nuclei, ExploitDB) or active exploitation has been observed, and there is minimal community discussion or media coverage, the potential for severe compromise necessitates prompt patching to version 2.5.1 or implementing the recommended workaround of restricting administrative dashboard access to trusted IP addresses.