PT-2020-12451 · Frozennode · Laravel-Administrator

Victor · Published 2020-03-25 · Updated 2023-02-03 · CVE-2020-10963

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FrozenNode Laravel-Administrator versions 5.0.12 and earlier

Description The issue allows unrestricted file upload and consequently Remote Code Execution via the "admin/tips image/image/file upload" API endpoint, where an attacker can upload a GIF image with PHP content and a .php extension. The product is discontinued.

Recommendations For versions 5.0.12 and earlier, as a temporary workaround, consider disabling the admin/tips image/image/file upload endpoint until a patch is available. Restrict access to this endpoint to minimize the risk of exploitation. Avoid using this endpoint with untrusted input until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-10963

GHSA-9R2J-RG24-FVPJ

Affected Products

Laravel-Administrator

References · 7

• 🔥 https://exploit-db.com/exploits/49112 · Exploit
• 🔥 https://xavibel.com/2020/03/23/unrestricted-file-upload-in-frozennode-laravel-administrator · Exploit
• https://osv.dev/vulnerability/CVE-2020-10963 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10963 · Security Note
• https://osv.dev/vulnerability/GHSA-9r2j-rg24-fvpj · Vendor Advisory
• https://t.me/cvenotify/2178 · Telegram Post
• http://packetstormsecurity.com/files/160243/Laravel-Administrator-4-File-Upload.html · Note