PT-2020-15607 · Joomla · Joomla Component Gmapfp

Published 2020-08-27 · Updated 2020-09-09 · CVE-2020-23972

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Joomla Component GMapFP versions J3.5 and J3.5free

Description The issue allows an attacker to access the upload function without authenticating to the application. It also enables the upload of files due to unrestricted file uploads. This can be bypassed by changing the content-type and name file to use double extensions.

Recommendations For Joomla Component GMapFP versions J3.5 and J3.5free, consider restricting access to the upload function to authenticated users only and implement proper validation for uploaded files to prevent bypassing by changing the content-type and name file. As a temporary workaround, consider disabling the upload function until a proper fix is available.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-23972

Affected Products

Joomla Component Gmapfp

References · 6

• 🔥 https://packetstormsecurity.com/files/159072/Joomla-GMapFP-J3.5-J3.5F-Arbitrary-File-Upload.html · Exploit
• 🔥 https://exploit-db.com/exploits/49129 · Exploit
• 🔥 https://raw.githubusercontent.com/me4yoursecurity/Reports/master/README.md · Exploit
• https://osv.dev/vulnerability/CVE-2020-23972 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-23972 · Security Note
• http://packetstormsecurity.com/files/159072/Joomla-GMapFP-J3.5-J3.5F-Arbitrary-File-Upload.html · Note