PT-2018-14826 · Clippercms · Clippercms

Ameer Pornillos · Published 2018-11-11 · Updated 2019-01-30 · CVE-2018-19135

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ClipperCMS version 1.3.3

Description The issue concerns the lack of CSRF protection on the kcfinder file upload feature, which is enabled by default. This allows an attacker to perform actions on behalf of an admin or any user with file upload capability, enabling automatic upload of various file types, including html, pdf, xml, and zip. These uploaded files can be accessed publicly under the "/assets/files" directory.

Recommendations For ClipperCMS version 1.3.3, consider disabling the kcfinder file upload feature until a patch is available to add CSRF protection. Restrict access to the "/assets/files" directory to minimize the risk of exploitation. Avoid using the file upload capability for sensitive files until the issue is resolved.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2018-19135

Affected Products

Clippercms

References · 4

• 🔥 https://github.com/ClipperCMS/ClipperCMS/issues/494 · Exploit
• 🔥 https://exploit-db.com/exploits/45839 · Exploit
• https://osv.dev/vulnerability/CVE-2018-19135 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19135 · Security Note