PT-2020-11991 · Froxlor · Froxlor

Johannes Segitz · Published 2020-03-09 · Updated 2022-05-24 · CVE-2020-10235

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 0.10.14

Description An issue was discovered that allows remote attackers with access to the installation routine to execute arbitrary code. This is due to the database configuration options being passed unescaped to exec in the backupExistingDatabase function in install/lib/class.FroxlorInstall.php.

Recommendations For versions prior to 0.10.14, update to version 0.10.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the installation routine to minimize the risk of exploitation.

Exploit

Fix

Improper Encoding or Escaping of Output

RCE

OS Command Injection

Weakness Enumeration

CWE-116

CWE-20

CWE-78

Related Identifiers

CVE-2020-10235

GHSA-P29C-JPGJ-V57R

Affected Products

Froxlor

References · 8

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=1165721 · Exploit
• https://github.com/Froxlor/Froxlor/commit/62ce21c9ec393f9962515c88f0c489ace42bf656 · Patch
• https://github.com/Froxlor/Froxlor/compare/0.10.13...0.10.14 · Patch
• https://github.com/Froxlor/Froxlor/commit/7e361274c5bf687b6a42dd1871f6d75506c5d207 · Patch
• https://osv.dev/vulnerability/GHSA-p29c-jpgj-v57r · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10235 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10235 · Vendor Advisory
• https://github.com/Froxlor/Froxlor · Note