PT-2018-14957 · Codiad · Codiad

Hexifeo · Publicado 2018-11-21 · Atualizado 2022-02-19 · CVE-2018-19423

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Codiad version 2.8.4

Description The issue allows remote authenticated administrators to execute arbitrary code by uploading an executable file.

Recommendations For version 2.8.4, update to a newer version that contains a fix for this issue, or as a temporary workaround, consider restricting file upload capabilities to prevent the execution of arbitrary code.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2018-19423

Produtos afetados

Codiad

Referências · 6

• 🔥 https://github.com/Hacker5preme/Exploits/tree/main/CVE-2018-19423-Exploit · Exploit
• 🔥 https://exploit-db.com/exploits/49907 · Exploit
• 🔥 http://packetstormsecurity.com/files/162772/Codiad-2.8.4-Shell-Upload.html · Exploit
• https://github.com/Codiad/Codiad/issues/1098 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-19423 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-19423 · Aviso do Fabricante