PT-2020-13814 · Monstra · Monstra Cms

Th3Lawbreaker · Published 2020-06-09 · Updated 2024-08-04 · CVE-2020-13978

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4

Description The issue allows an attacker with administrative access to execute arbitrary OS commands via the Theme Module by visiting the "admin/index.php?id=themes&action=edit chunk" URI. This is achieved by modifying .chunk.php files on the Edit Chunk screen. It is noted that there is no indication the Edit Chunk feature was intended to prevent an administrator from using PHP's exec feature.

Recommendations For Monstra CMS version 3.0.4, as a temporary workaround, consider restricting access to the Theme Module and the Edit Chunk feature to minimize the risk of exploitation. Avoid using the exec feature in .chunk.php files until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2020-13978

Affected Products

Monstra Cms

References · 5

• 🔥 https://github.com/monstra-cms/monstra/issues/464 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-13978 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13978 · Vendor Advisory
• https://t.me/cvenotify/82889 · Telegram Post
• https://t.me/cvenotify/88974 · Telegram Post