PT-2019-19750 · Ofcms · Ofcms

匿名 · Publicado 2019-03-06 · Atualizado 2019-03-07 · CVE-2019-9611

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions OFCMS versions prior to 1.1.3

Description An issue in OFCMS allows directory traversal through the "admin/cms/template/getTemplates.html" endpoint, using ../ in the dir parameter. This enables writing arbitrary content, specified in the file content parameter, into an arbitrary file, defined by the file name parameter. The issue is related to the save function in TemplateController.java.

Recommendations For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "admin/cms/template/getTemplates.html" endpoint to minimize the risk of exploitation. Avoid using the dir, file content, and file name parameters in this endpoint until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-9611

Produtos afetados

Ofcms

Referências · 3

• 🔥 https://seebug.org/vuldb/ssvid-97839 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-9611 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-9611 · Aviso do Fabricante