PT-2017-13442 · Blackcat · Blackcat Cms

Published 2017-09-12 · Updated 2017-09-19 · CVE-2017-14399

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BlackCat CMS version 1.2.2

Description The issue allows for unrestricted file upload in the backend/media/ajax rename.php file via the extension parameter. This can be exploited by changing the file extension, for example, from .jpg to .php.

Recommendations For BlackCat CMS version 1.2.2, consider restricting access to the backend/media/ajax rename.php file or validating the extension parameter to prevent malicious file uploads. As a temporary workaround, restrict the use of the extension parameter in the affected API endpoint until a patch is available.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2017-14399

Affected Products

Blackcat Cms

References · 3

• https://osv.dev/vulnerability/CVE-2017-14399 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14399 · Security Note
• https://github.com/SPuerBRead/blackcat-cms-file-upload/blob/master/README.md · Note