PT-2023-31917 · Unknown · Winter Cms
Sanineng
·
Publicado
2023-12-28
·
Atualizado
2024-01-05
·
CVE-2023-52085
CVSS v3.1
3.3
Baixa
| Vetor | AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Winter CMS versions prior to 1.2.4
Description
The issue concerns a Local File Inclusion vulnerability in Winter CMS, a free, open-source content management system. Users with access to backend forms that include a ColorPicker FormWidget can provide a value that would then be included without further processing in the compilation of custom stylesheets via LESS. This had the potential to lead to a Local File Inclusion vulnerability. The vulnerability is related to the
ColorPicker FormWidget and the compilation of custom stylesheets via LESS.Recommendations
For versions prior to 1.2.4, update to version 1.2.4 to resolve the issue. As a temporary workaround, consider disabling the
ColorPicker FormWidget in backend forms until a patch is available. Apply the patch from https://github.com/wintercms/winter/commit/5bc9257fe2bc47d8b786a1b1bf96bafad23d8ddd manually if unable to upgrade to v1.2.4. Restrict access to the Theme Customization form and other forms that include the ColorPicker FormWidget to minimize the risk of exploitation.Exploit
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Winter Cms