PT-2019-14517 · Bludit · Bludit

Christasao · Publicado 2019-09-08 · Atualizado 2022-04-26 · CVE-2019-16113

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bludit version 3.9.2

Description The issue allows remote code execution via the "bl-kernel/ajax/upload-images.php" endpoint. This is possible because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname.

Recommendations For Bludit version 3.9.2, as a temporary workaround, consider restricting access to the "bl-kernel/ajax/upload-images.php" endpoint until a patch is available. Avoid allowing users to upload files with PHP code, especially with .jpg file names, to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-16113

Produtos afetados

Bludit

Referências · 16

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/bludit_upload_images_exec.rb · Exploit
• 🔥 https://github.com/bludit/bludit/issues/1081 · Exploit
• 🔥 https://github.com/cybervaca/CVE-2019-16113 · Exploit
• 🔥 https://github.com/ynots0ups/CVE-2019-16113 · Exploit
• 🔥 https://github.com/0xConstant/CVE-2019-16113 · Exploit
• 🔥 https://github.com/banomaly/CVE-2019-16113 · Exploit
• 🔥 https://github.com/hg8/CVE-2019-16113-PoC · Exploit
• 🔥 http://packetstormsecurity.com/files/158569/Bludit-3.9.2-Directory-Traversal.html · Exploit
• 🔥 http://packetstormsecurity.com/files/155295/Bludit-Directory-Traversal-Image-File-Upload.html · Exploit
• 🔥 https://exploit-db.com/exploits/48568 · Exploit
• 🔥 https://exploit-db.com/exploits/47699 · Exploit
• 🔥 https://exploit-db.com/exploits/48701 · Exploit
• 🔥 http://packetstormsecurity.com/files/157988/Bludit-3.9.12-Directory-Traversal.html · Exploit
• https://osv.dev/vulnerability/CVE-2019-16113 · Aviso do Fabricante
• https://t.me/cvenotify/29345 · Publicação no Telegram