An unauthenticated OS command injection vulnerability in SabyasachiRana WebMap allows remote attackers to achieve full root-level code execution within the container environment.

The application fails to properly sanitize user-supplied input in the target and params arguments of the nmap_newscan function within functions_nmap.py. By injecting newline characters, an unauthenticated attacker can escape the intended Nmap command and execute arbitrary commands with root privileges inside the Docker container.

This vulnerability carries a CVSS score of 8.3, reflecting its high severity due to the lack of required authentication and the potential for complete system compromise. Successful exploitation grants an attacker full control over the WebMap container, which may lead to lateral movement within the host network, data exfiltration, or the deployment of persistent malicious payloads. Given the tool's common deployment on internet-facing interfaces, the risk of unauthorized access is significant.

Immediate Action: Update the WebMap installation to include the security fix provided in commit 3d52f65803a2716bff14d938352c6fef45b0cfb6. Since the maintainer has deleted the repository, users should verify their deployment status and migrate to more secure alternatives if they cannot apply the patch manually.

Proactive Monitoring: Review web server and application logs for anomalous requests containing newline characters (%0a) or suspicious shell commands directed at the Nmap scan endpoint. Monitor container egress traffic for unexpected connections to unknown external IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) to filter out malicious input containing newline characters or shell metacharacters in POST parameters. Ensure the service is not exposed to the public internet by binding it only to local network interfaces or requiring VPN access.

Public Exploit Available: Yes — a published proof-of-concept exists, attributed to the security researcher's technical write-up on the Striker Blog.

The severity of this vulnerability, combined with the availability of a public proof-of-concept, necessitates immediate action. Organizations currently running WebMap must restrict network access to the application immediately and apply the necessary code-level patch. Given the repository's removal, stakeholders are strongly advised to evaluate their reliance on this software and consider transitioning to actively maintained security tools.