PT-2018-14826 · Clippercms · Clippercms

Ameer Pornillos · Publicado 2018-11-11 · Atualizado 2019-01-30 · CVE-2018-19135

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ClipperCMS version 1.3.3

Description The issue concerns the lack of CSRF protection on the kcfinder file upload feature, which is enabled by default. This allows an attacker to perform actions on behalf of an admin or any user with file upload capability, enabling automatic upload of various file types, including html, pdf, xml, and zip. These uploaded files can be accessed publicly under the "/assets/files" directory.

Recommendations For ClipperCMS version 1.3.3, consider disabling the kcfinder file upload feature until a patch is available to add CSRF protection. Restrict access to the "/assets/files" directory to minimize the risk of exploitation. Avoid using the file upload capability for sensitive files until the issue is resolved.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2018-19135

Produtos afetados

Clippercms

Referências · 4

• 🔥 https://github.com/ClipperCMS/ClipperCMS/issues/494 · Exploit
• 🔥 https://exploit-db.com/exploits/45839 · Exploit
• https://osv.dev/vulnerability/CVE-2018-19135 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-19135 · Nota de Segurança