PT-2018-14919 · Greencms · Greencms

Lovejackey · Published 2018-11-17 · Updated 2020-08-24 · CVE-2018-19329

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions GreenCMS version 2.3.0603

Description The issue allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an "m=admin&c=media&a=delfilehandle&id=" call. This is related to the delete button in the "m=admin&c=media&a=restorefile" functionality.

Recommendations For GreenCMS version 2.3.0603, consider restricting access to the "m=admin&c=media&a=delfilehandle&id=" endpoint to prevent arbitrary file deletion until a fix is available. As a temporary workaround, limit the use of the delete button in the "m=admin&c=media&a=restorefile" functionality to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-19329

Affected Products

Greencms

References · 3

• 🔥 https://github.com/GreenCMS/GreenCMS/issues/113 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19329 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19329 · Vendor Advisory