PT-2018-18878 · Dedecms · Dedecms

Wisdomtree · Publicado 2018-03-30 · Atualizado 2018-04-23 · CVE-2018-9134

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7

Description The issue concerns a CSRF vulnerability in the file manage control.php file. This vulnerability can be exploited by renaming an arbitrary file under uploads/userup to a .php file under the web root, allowing for PHP code execution. The oldfilename and newfilename parameters are used in this process.

Recommendations For DedeCMS version 5.7, as a temporary workaround, consider restricting access to the file manage control.php file and the fmdo=rename action to minimize the risk of exploitation. Avoid using the oldfilename and newfilename parameters in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2018-9134

Produtos afetados

Dedecms

Referências · 4

• https://xz.aliyun.com/t/2234 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-9134 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/141335 · Nota
• https://osv.dev/vulnerability/CVE-2018-9134 · Aviso do Fabricante