PT-2018-10108 · Cksource+1 · Ckeditor+1

Published 2018-05-07 · Updated 2024-08-05 · CVE-2018-10795

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Liferay versions 6.2.x and earlier

Description The issue concerns an FCKeditor configuration that may allow an attacker to upload or transfer files of potentially dangerous types. These files can be automatically processed within the product's environment via specific URI paths, such as "browser/liferay/browser.html?Type=" or "html/js/editor/fckeditor/editor/filemanager/browser/liferay/browser.html". It's noted that the vendor disputes this issue, citing that file upload is an expected feature subject to Role Based Access Control checks, which restrict uploads to authenticated users with proper permissions.

Recommendations For Liferay versions 6.2.x and earlier, consider restricting access to the FCKeditor file upload feature to minimize the risk of exploitation, ensuring that only authenticated users with proper permissions can upload files. Additionally, review and enforce Role Based Access Control checks to prevent unauthorized file uploads.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2018-10795

Affected Products

Ckeditor

Liferay

References · 4

• 🔥 https://cxsecurity.com/issue/WLB-2018050029 · Exploit
• https://osv.dev/vulnerability/CVE-2018-10795 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10795 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10795 · Note