PT-2018-18636 · Opencms · Opencms

Sureshbabu Narvaneni · Published 2018-03-20 · Updated 2024-08-05 · CVE-2018-8811

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenCMS version 10.5.3

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. The system stores uploaded content, such as SVG files, in the CMS content repository without modification. If an SVG file contains a script, it may be executed, potentially leading to malicious activity. To exploit this issue, a user must have an account in the CMS as a content manager.

Recommendations For OpenCMS version 10.5.3, consider disabling the user role.jsp page in system/workplace/admin/accounts/ until a patch is available to prevent privilege escalation requests. Restrict access to the CMS content repository to minimize the risk of exploitation. Avoid allowing registered users to upload potentially malicious content, such as SVG files containing scripts, until the issue is resolved.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2018-8811

Affected Products

Opencms

References · 5

• 🔥 https://github.com/alkacon/opencms-core/issues/586 · Exploit
• 🔥 https://exploit-db.com/exploits/44391 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-8811 · Security Note
• https://osv.dev/vulnerability/CVE-2018-8811 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8811 · Note