PT-2019-19750 · Ofcms · Ofcms

匿名 · Published 2019-03-06 · Updated 2019-03-07 · CVE-2019-9611

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions OFCMS versions prior to 1.1.3

Description An issue in OFCMS allows directory traversal through the "admin/cms/template/getTemplates.html" endpoint, using ../ in the dir parameter. This enables writing arbitrary content, specified in the file content parameter, into an arbitrary file, defined by the file name parameter. The issue is related to the save function in TemplateController.java.

Recommendations For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "admin/cms/template/getTemplates.html" endpoint to minimize the risk of exploitation. Avoid using the dir, file content, and file name parameters in this endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-9611

Affected Products

Ofcms

References · 3

• 🔥 https://seebug.org/vuldb/ssvid-97839 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-9611 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9611 · Vendor Advisory