PT-2020-14722 · Ortus · Ortus Testbox

Published 2020-11-24 · Updated 2021-07-21 · CVE-2020-15929

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ortus TestBox versions 2.4.0 through 4.1.0

Description The issue allows an attacker to write an arbitrary CFM file within the application's context, containing attacker-defined CFML tags, leading to Remote Code Execution. This is achieved by passing unvalidated query string parameters to the system/runners/HTMLRunner.cfm endpoint.

Recommendations For Ortus TestBox versions 2.4.0 through 4.1.0, consider disabling access to the system/runners/HTMLRunner.cfm endpoint until a patch is available. Restrict the ability to write CFM files within the application's context to minimize the risk of exploitation. Avoid using unvalidated query string parameters in the affected endpoint. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-15929

Affected Products

Ortus Testbox

References · 5

• 🔥 https://exploit-db.com/exploits/49077 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-15929 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15929 · Vendor Advisory
• https://t.me/cibsecurity/16765 · Telegram Post
• https://t.me/cvenotify/6076 · Telegram Post