PT-2018-14919 · Greencms · Greencms

Lovejackey · Publicado 2018-11-17 · Atualizado 2020-08-24 · CVE-2018-19329

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions GreenCMS version 2.3.0603

Description The issue allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an "m=admin&c=media&a=delfilehandle&id=" call. This is related to the delete button in the "m=admin&c=media&a=restorefile" functionality.

Recommendations For GreenCMS version 2.3.0603, consider restricting access to the "m=admin&c=media&a=delfilehandle&id=" endpoint to prevent arbitrary file deletion until a fix is available. As a temporary workaround, limit the use of the delete button in the "m=admin&c=media&a=restorefile" functionality to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-19329

Produtos afetados

Greencms

Referências · 3

• 🔥 https://github.com/GreenCMS/GreenCMS/issues/113 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19329 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-19329 · Aviso do Fabricante