PT-2018-14399 · Lemon · Lemon

Published 2018-10-15 · Updated 2019-01-11 · CVE-2018-18315

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions lemon version 1.9.0

Description The issue allows attackers to upload arbitrary files due to insufficient validation in the copyMultipartFileToFile method within CdnUtils. Specifically, it only checks for a ../ substring and does not validate the file type and spaceName parameter.

Recommendations For lemon version 1.9.0, consider validating the file type and spaceName parameter in the copyMultipartFileToFile method to prevent arbitrary file uploads. As a temporary workaround, restrict access to the CdnController to minimize the risk of exploitation.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2018-18315

Affected Products

Lemon

References · 3

• https://osv.dev/vulnerability/CVE-2018-18315 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-18315 · Security Note
• https://github.com/xuhuisheng/lemon/issues/175 · Note