PT-2019-13823 · Backdrop · Backdrop Cms

Ashwin Shenoi + 2 · Publicado 2019-08-08 · Atualizado 2024-08-05 · CVE-2019-14771

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Backdrop CMS versions 1.12.x through 1.12.7 Backdrop CMS versions 1.13.x through 1.13.2

Description The issue allows the upload of entire-site configuration archives through the user interface or command line, without sufficiently checking uploaded archives for invalid data. This could potentially allow non-configuration scripts to be uploaded to the server. The attack is mitigated by the requirement for the "Synchronize, import, and export configuration" permission, which should only be given to trusted administrators. Additionally, other preventative measures in Backdrop CMS prevent the execution of PHP scripts, so another server-side scripting language must be accessible on the server to execute code.

Recommendations For Backdrop CMS versions 1.12.x through 1.12.7, update to version 1.12.8 or later. For Backdrop CMS versions 1.13.x through 1.13.2, update to version 1.13.3 or later. As a temporary workaround, consider restricting the "Synchronize, import, and export configuration" permission to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2019-14771

Produtos afetados

Backdrop Cms

Referências · 5

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14771 · Nota
• https://backdropcms.org/security/backdrop-sa-core-2019-012 · Aviso do Fabricante
• https://t.me/cvenotify/89091 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-14771 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14771 · Nota de Segurança