PT-2023-29742 · Gibbon · Gibbon

Christian Poeschl · Publicado 2023-11-13 · Atualizado 2023-11-17 · CVE-2023-45880

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GibbonEdu Gibbon versions through 25.0.0

Description The issue allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The templateFileDestination parameter can be set to an arbitrary pathname (and extension), allowing creation of PHP files outside of the uploads directory, directly in the webroot.

Recommendations For versions through 25.0.0, consider disabling the report template builder feature until a patch is available to prevent exploitation. Restrict access to the templateFileDestination parameter to minimize the risk of creating malicious PHP files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-45880

Produtos afetados

Gibbon

Referências · 6

• 🔥 https://herolab.usd.de/security-advisories/usd-2023-0022 · Exploit
• https://osv.dev/vulnerability/CVE-2023-45880 · Aviso do Fabricante
• https://t.me/cvenotify/60617 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-45880 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1724397737469227287 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1724301077514719253 · Publicação no Twitter