PT-2018-13807 · Elefant · Elefant Cms

Liao10086 · Publicado 2018-09-12 · Atualizado 2022-05-13 · CVE-2018-16975

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Elefant CMS versions prior to 2.0.7

Description The issue is related to a PHP Code Execution Vulnerability. It can be exploited through the /designer/add/stylesheet.php endpoint by using a .php extension in the New Stylesheet Name field in conjunction with <?php content. This is due to insufficient input validation in apps/designer/handlers/csspreview.php.

Recommendations For versions prior to 2.0.7, update to version 2.0.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the /designer/add/stylesheet.php endpoint or disabling the apps/designer/handlers/csspreview.php handler until a patch is available. Avoid using the .php extension in the New Stylesheet Name field to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2018-16975

GHSA-X2W2-QGV6-8XRM

Produtos afetados

Elefant Cms

Referências · 7

• 🔥 https://github.com/jbroadway/elefant/issues/286 · Exploit
• https://github.com/jbroadway/elefant/releases/tag/elefant_2_0_7_stable · Nota
• https://github.com/jbroadway/elefant · Nota
• https://github.com/jbroadway/elefant/commit/0795ab57c7ffa53ff4af57e229f6d9680fa54a21 · Correção
• https://osv.dev/vulnerability/GHSA-x2w2-qgv6-8xrm · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-16975 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-16975 · Aviso do Fabricante