PT-2016-4571 · Serendipity · Serendipity

Shinkurto · Publicado 2016-12-30 · Atualizado 2017-01-03 · CVE-2016-10082

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 2.1

Description The issue arises from a failure to sanitize the dbType POST parameter in the include/functions installer.inc.php file, which is then used in an include() call in the bundled-libs/serendipity generateFTPChecksums.php file. This can lead to a File Inclusion and possible Code Execution attack during the first-time installation of Serendipity.

Recommendations For Serendipity versions prior to 2.1, update to version 2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the include/functions installer.inc.php file and the bundled-libs/serendipity generateFTPChecksums.php file to minimize the risk of exploitation. Avoid using the dbType parameter in the affected installation process until the issue is resolved.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-10082

Produtos afetados

Serendipity

Referências · 6

• https://github.com/s9y/Serendipity/issues/433 · Correção
• https://github.com/s9y/Serendipity/commit/bba6a840f4d53cbaf62971a3078a98c8ddf92b85 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10082 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-10082 · Nota de Segurança
• http://securityfocus.com/bid/95165 · Nota
• https://osv.dev/vulnerability/CVE-2016-10082 · Aviso do Fabricante