PT-2018-18878 · Dedecms · Dedecms

Wisdomtree · Published 2018-03-30 · Updated 2018-04-23 · CVE-2018-9134

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7

Description The issue concerns a CSRF vulnerability in the file manage control.php file. This vulnerability can be exploited by renaming an arbitrary file under uploads/userup to a .php file under the web root, allowing for PHP code execution. The oldfilename and newfilename parameters are used in this process.

Recommendations For DedeCMS version 5.7, as a temporary workaround, consider restricting access to the file manage control.php file and the fmdo=rename action to minimize the risk of exploitation. Avoid using the oldfilename and newfilename parameters in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2018-9134

Affected Products

Dedecms

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-9134 · Security Note
• https://osv.dev/vulnerability/CVE-2018-9134 · Vendor Advisory
• https://xz.aliyun.com/t/2234 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/141335 · Note