A critical improper authentication vulnerability in Metasoft MetaCRM allows unauthenticated remote attackers to manipulate system debugging settings and access sensitive information.

The application fails to perform authentication checks on the /debug.jsp and /env.jsp endpoints. This allows an unauthenticated attacker to remotely access sensitive environment details and modify server debugging configurations.

Successful exploitation of this vulnerability could lead to the exposure of sensitive server configurations, absolute file paths, and system logs, significantly increasing the risk of further system compromise. While the CVSS score of 7.3 reflects high severity, the ability for an unauthenticated attacker to modify debug settings makes this a significant threat to internal application integrity and data confidentiality.

Immediate Action: As there is no official patch available, administrators must immediately restrict network access to the /debug.jsp and /env.jsp endpoints at the network or web server level.

Proactive Monitoring: Monitor server access logs for anomalous requests targeting /debug.jsp or /env.jsp, particularly those originating from unauthorized or external IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block all external access to the identified vulnerable endpoints until a vendor-supplied update is released.

Public Exploit Available: Yes, a published proof-of-concept exists, attributed to the security researcher's write-up on GitHub.

Given the availability of a public proof-of-concept and the lack of vendor-provided patches, this vulnerability presents an immediate risk to the security of the MetaCRM platform. Organizations should prioritize isolating the affected endpoints from public access to prevent unauthorized manipulation and information disclosure while awaiting a formal security update from the vendor.