PT-2020-19796 · Fusionauth+1 · Fusionauth+1

Gianluca Baldi · Published 2020-01-28 · Updated 2021-07-21 · CVE-2020-7799

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FusionAuth versions prior to 1.11.0

Description An issue was discovered in FusionAuth where an authenticated user, allowed to edit e-mail templates or themes, can execute commands on the underlying operating system by abusing freemarker.template.utility.Execute in the Apache FreeMarker engine that processes custom templates.

Recommendations For versions prior to 1.11.0, update to version 1.11.0 or later to resolve the issue. As a temporary workaround, consider restricting access to edit e-mail templates and themes to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-917

Related Identifiers

CVE-2020-7799

Affected Products

Apache Freemarker

Fusionauth

References · 9

• 🔥 https://github.com/ianxtianxt/CVE-2020-7799 · Exploit
• 🔥 https://fusionauth.io/docs/v1/tech/release-notes · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-7799 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7799 · Vendor Advisory
• http://packetstormsecurity.com/files/156102/FusionAuth-1.10-Remote-Command-Execution.html · Note
• https://t.me/cvenotify/507 · Telegram Post
• https://lab.mediaservice.net/advisory/2020-03-fusionauth.txt · Note
• https://seclists.org/bugtraq/2020/Jan/39 · Note
• https://t.me/defcon_news/37280 · Telegram Post