Horizon Alert
Summary of the vulnerability and why it matters
This advisory details a critical vulnerability in the Legal Stone product, which could allow unauthenticated attackers to inject malicious code by exploiting how the software handles specific data. The main concern is confirming relevance and exposure.
- Unauthenticated code injection in Legal Stone.
- Critical flaw allows remote code execution.
- Confirm if Legal Stone is in use.
Attack Path
How an attacker could exploit the issue
An attacker could exploit this vulnerability by sending a specially crafted request over the internet to a web server running a vulnerable version of the Legal Stone theme. This could lead to the execution of arbitrary code on the server.
- No authentication required.
- Triggered by sending malicious data.
- Risk of arbitrary code execution.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability could allow an unauthenticated attacker to inject PHP objects into the Legal Stone theme when supported by the advisory. This may lead to the execution of arbitrary code or data manipulation on the affected system.
- Affected system data.
- Through unauthenticated network access.
- Code execution or data compromise.
Operational Fix
Recommended remediation, mitigation, and detection steps
Unauthenticated PHP Object Injection in Legal Stone versions prior to 1.2.11 can be exploited by unauthenticated attackers. The first step is to identify all instances of Legal Stone, determine their internet exposure and business criticality, and assign an owner for remediation.
- Assign ownership to application owners.
- Verify internet-facing installations.
- Plan remediation based on risk.
