PT-2018-13760 · Monstra · Monstra Cms

Xiaohuihui1113 · Publicado 2018-09-18 · Atualizado 2018-11-19 · CVE-2018-16819

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4

Description The issue concerns arbitrary file deletion in Monstra CMS. An attacker can exploit this by sending a request to the "admin/index.php" endpoint with specific parameters, including id, path, and delete file. The path parameter can be manipulated using directory traversal characters (../) to target files outside the intended directory, and the delete file parameter is used to specify the file to be deleted.

Recommendations For Monstra CMS version 3.0.4, consider restricting access to the "admin/index.php" endpoint, specifically the file deletion functionality, until a fix is available. As a temporary workaround, avoid using the delete file parameter in requests to the "admin/index.php" endpoint with id=filesmanager.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-16819

Produtos afetados

Monstra Cms

Referências · 4

• 🔥 https://github.com/monstra-cms/monstra/issues/456 · Exploit
• 🔥 http://blog.51cto.com/13770310/2173956 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-16819 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-16819 · Aviso do Fabricante