PT-2019-15098 · Jfinal · Jfinal

Glassyamadeus · Published 2019-10-08 · Updated 2022-05-25 · CVE-2019-17352

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions JFinal cos before 2019-08-13 JFinal version 4.4

Description The issue allows bypassing the isSafeFile() function, enabling the upload of any file type. For instance, a .jsp file can be uploaded, stored, and potentially deleted immediately, but certain exceptions may prevent this deletion.

Recommendations For JFinal cos before 2019-08-13, consider updating to a version released after 2019-08-13 to address the issue. For JFinal version 4.4, consider updating to a version that incorporates the fix for the isSafeFile() function bypass vulnerability.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2019-17352

GHSA-279P-PC38-XX4P

Affected Products

Jfinal

References · 7

• 🔥 https://github.com/jfinal/jfinal/issues/171 · Exploit
• https://osv.dev/vulnerability/GHSA-279p-pc38-xx4p · Vendor Advisory
• https://gitee.com/jfinal/cos/commit/5eb23d6e384abaad19faa7600d14c9a2f525946a · Vendor Advisory
• https://gitee.com/jfinal/cos/commit/8d26eec61f0d072a68bf7393cf3a8544a1112130 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-17352 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-17352 · Security Note
• https://gitee.com/jfinal/cos · Note