PT-2018-5627 · Onethink+1 · Onethink+1

Bo Wang + 2 · Publicado 2018-04-10 · Atualizado 2018-05-17 · CVE-2017-14323

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Onethink versions V1.0 through V1.1

Description: The issue allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution. This is achieved through a Server Side Request Forgery (SSRF) in the getRemoteImage.php file in Ueditor, utilizing the upfile parameter.

Recommendations: For Onethink versions V1.0 through V1.1, consider restricting access to the getRemoteImage.php file or disabling the upfile parameter to minimize the risk of exploitation.

Exploit

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2017-14323

Produtos afetados

Onethink

Ueditor

Referências · 3

• 🔥 http://seclists.org/fulldisclosure/2018/Apr/16 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-14323 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-14323 · Aviso do Fabricante