PT-2018-14955 · Getsimple · Getsimple Cms

Hexifeo · Publicado 2018-11-21 · Atualizado 2018-12-28 · CVE-2018-19421

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions GetSimpleCMS version 3.3.15

Description The issue concerns the upload functionality in GetSimpleCMS, where the admin/upload.php blocks uploads of .html files, but Internet Explorer can still render HTML elements in a .eml file. This is due to the admin/upload-uploadify.php and the validate safe file function in admin/inc/security functions.php.

Recommendations For GetSimpleCMS version 3.3.15, consider restricting the upload of .eml files or disabling the upload-uploadify.php functionality until a proper fix is available. Additionally, review and modify the validate safe file function in admin/inc/security functions.php to properly handle file type validation and prevent potential HTML rendering in unauthorized file types.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2018-19421

Produtos afetados

Getsimple Cms

Referências · 4

• 🔥 https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1301 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19421 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-19421 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19421 · Nota