PT-2018-13867 · Progress · Sitefinity Cms

Ali Hardudi · Publicado 2018-09-28 · Atualizado 2018-12-12 · CVE-2018-17055

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Progress Sitefinity CMS versions 4.0 through 11.0

Description The issue is related to an arbitrary file upload vulnerability, specifically concerning image uploads.

Recommendations For Progress Sitefinity CMS versions 4.0 through 11.0, update to a version that contains a fix for this issue.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2018-17055

Produtos afetados

Sitefinity Cms

Referências · 4

• 🔥 https://insinuator.net/2018/10/vulnerabilities-in-sitefinity-wcms-a-success-story-of-a-responsible-disclosure-process · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-17055 · Nota de Segurança
• https://knowledgebase.progress.com/articles/Article/Security-Advisory-for-Resolving-Security-vulnerabilities-September-2018 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-17055 · Aviso do Fabricante