PT-2018-18915 · Widen · File Uploader

Larry W. Cashdollar + 1 · Publicado 2018-11-19 · Atualizado 2022-05-14 · CVE-2018-9209

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FineUploader php-traditional-server versions prior to v1.3

Description The issue is related to an unauthenticated arbitrary file upload. This allows unauthorized users to upload files without proper validation.

Recommendations For versions prior to v1.3, update to a version that includes the fix for this issue.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2018-9209

GHSA-J78W-6R73-22VH

Produtos afetados

File Uploader

Referências · 5

• 🔥 http://vapidlabs.com/advisory.php?v=208 · Exploit
• https://osv.dev/vulnerability/CVE-2018-9209 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-9209 · Nota de Segurança
• ❌ https://github.com/FineUploader/php-traditional-server · Nota, Deleted
• https://osv.dev/vulnerability/GHSA-j78w-6r73-22vh · Aviso do Fabricante