PT-2023-29287 · Unknown · Concrete Cms

Romanhu · Publicado 2023-10-10 · Atualizado 2024-08-02 · CVE-2023-44763

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Concrete CMS version 9.2.1

Description The issue allows for Arbitrary File Upload via a Thumbnail file upload, which can lead to Cross-Site Scripting (XSS). This is possible even with the default configuration, where 'pdf' is one of the allowed file types, despite the vendor's stance that customers should exclude 'pdf' from allowed file types.

Recommendations For Concrete CMS version 9.2.1, consider excluding 'pdf' from the allowed file types in the configuration to mitigate the risk of Arbitrary File Upload and subsequent Cross-Site Scripting (XSS) attacks. As a temporary workaround, restrict the use of the Thumbnail file upload feature until a proper fix is applied.

Exploit

Correção

XSS

Unrestricted File Upload

Enumeração de Fraquezas

CWE-79

CWE-434

Identificadores relacionados

CVE-2023-44763

GHSA-WRP2-6V6J-HFMG

Produtos afetados

Concrete Cms

Referências · 8

• 🔥 https://github.com/sromanhu/ConcreteCMS-Arbitrary-file-upload-Thumbnail · Exploit
• https://github.com/concretecms/concretecms · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-44763 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-44763 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-wrp2-6v6j-hfmg · Aviso do Fabricante
• https://web.archive.org/web/20231026034159/https://documentation.concretecms.org/user-guide/editors-reference/dashboard/system-and-maintenance/files/allowed-file-types · Nota
• https://t.me/cibsecurity/71929 · Publicação no Telegram
• https://concretecms.org/about/project-news/security/security-advisory-2023-10-25-concrete-cms-rejects-cve-2023-44763 · Nota