PT-2018-18636 · Opencms · Opencms

Sureshbabu Narvaneni · Publicado 2018-03-20 · Atualizado 2024-08-05 · CVE-2018-8811

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenCMS version 10.5.3

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. The system stores uploaded content, such as SVG files, in the CMS content repository without modification. If an SVG file contains a script, it may be executed, potentially leading to malicious activity. To exploit this issue, a user must have an account in the CMS as a content manager.

Recommendations For OpenCMS version 10.5.3, consider disabling the user role.jsp page in system/workplace/admin/accounts/ until a patch is available to prevent privilege escalation requests. Restrict access to the CMS content repository to minimize the risk of exploitation. Avoid allowing registered users to upload potentially malicious content, such as SVG files containing scripts, until the issue is resolved.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2018-8811

Produtos afetados

Opencms

Referências · 5

• 🔥 https://github.com/alkacon/opencms-core/issues/586 · Exploit
• 🔥 https://exploit-db.com/exploits/44391 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8811 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-8811 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-8811 · Aviso do Fabricante