PT-2019-15194 · Gila · Gila Cms

Rastating · Publicado 2019-10-13 · Atualizado 2019-10-17 · CVE-2019-17536

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Crítica

Vetor base

AC:L/AV:N/A:L/C:H/I:H/PR:L/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Gila CMS versions prior to 1.11.5

Description The issue allows an attacker to upload a file with a dangerous type via the moveAction function in core/controllers/fm.php. This can be achieved by using the admin/media upload and fm/move endpoints.

Recommendations For versions prior to 1.11.5, update to version 1.11.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the moveAction function in core/controllers/fm.php to minimize the risk of exploitation. Avoid using the admin/media upload and fm/move endpoints until the issue is resolved.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2019-17536

Produtos afetados

Gila Cms

Referências · 4

• 🔥 https://github.com/GilaCMS/gila/pull/49 · Exploit
• 🔥 https://rastating.github.io/gila-cms-upload-filter-bypass-and-rce · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-17536 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-17536 · Aviso do Fabricante