PT-2012-3292 · Moxiecode Systems+1 · Tinymce+1
Publicado
2012-09-06
·
Atualizado
2012-09-13
·
CVE-2012-1467
CVSS v2.0
6.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Open Journal Systems versions prior to 2.3.7
Description
The issue concerns multiple directory traversal vulnerabilities in the iBrowser plugin library. These vulnerabilities allow remote authenticated users to delete or rename arbitrary files. This is achieved by using a .. (dot dot) in the
param parameter to the "/lib/pkp/lib/tinymce/jscripts/tiny mce/plugins/ibrowser/scripts/rfiles.php" endpoint.Recommendations
For versions prior to 2.3.7, update to version 2.3.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the iBrowser plugin library to minimize the risk of exploitation. Avoid using the
param parameter in the affected endpoint until the issue is resolved.Exploit
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Open Journal Systems
Tinymce