PT-2020-14260 · Studio 42+1 · Elfinder+1

Published 2020-09-18 · Updated 2020-09-29 · CVE-2020-15189

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SOY CMS versions prior to 3.0.2.328

Description The issue is caused by an insecure configuration in elFinder, allowing for Remote Code Execution (RCE) through Unrestricted File Upload. Additionally, a Cross-Site Scripting (XSS) vulnerability can be used to increase the impact by redirecting the administrator to access a specially crafted page.

Recommendations For SOY CMS versions prior to 3.0.2.328, update to version 3.0.2.328 to resolve the issue. As a temporary workaround, consider restricting access to the elFinder module to minimize the risk of exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-15189

GHSA-6R2F-P68G-M433

Affected Products

Soy Cms

Elfinder

References · 7

• 🔥 https://github.com/inunosinsi/soycms/issues/9 · Exploit
• 🔥 https://youtu.be/FWIDFNXmr9g · Exploit
• https://github.com/inunosinsi/soycms/pull/14 · Patch
• https://github.com/inunosinsi/soycms/pull/14/commits/e4ef00677ed52f9e5a5fcfcb56b797f5412b5d59 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-15189 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15189 · Vendor Advisory
• https://github.com/inunosinsi/soycms/security/advisories/GHSA-6r2f-p68g-m433 · Note