PT-2020-6756 · Joomla · Gmapfp

Published 2020-09-01 · Updated 2020-09-08 · CVE-2020-23971

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Joomla Component GMapFP version J3.30pro

Description The issue is related to insecure permissions in the GMapFP Joomla component. An attacker can access the upload function without authentication and upload files due to unrestricted file uploads. This can be exploited by changing the content-type and using double extensions in file names. The vulnerability is associated with default permission settings, which can allow a remote attacker to elevate their privileges.

Recommendations For version J3.30pro, consider restricting access to the upload function until a fix is available. As a temporary workaround, restrict the use of the file upload feature to minimize the risk of exploitation. Avoid using the upload functionality with untrusted users until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2022-06053

CVE-2020-23971

Affected Products

Gmapfp

References · 6

• 🔥 https://github.com/404notf0und/CVE-Flow/blob/master/README.md · Exploit
• 🔥 https://packetstormsecurity.com/files/156889/Joomla-GMapFP-3.30-Arbitrary-File-Upload.html · Exploit
• https://bdu.fstec.ru/vul/2022-06053 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-23971 · Security Note
• https://osv.dev/vulnerability/CVE-2020-23971 · Vendor Advisory
• https://vuldb.com/?id.160588 · Note