PT-2020-7793 · Unknown+1 · Collabtive+1

Published 2020-02-17 · Updated 2022-01-01 · CVE-2015-0258

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Collabtive versions prior to 2.1

Description: The issue is related to multiple incomplete blacklist vulnerabilities in the avatar upload functionality. This allows remote authenticated users to execute arbitrary code by uploading files with specific extensions, such as .php3, .php4, .php5, or .phtml.

Recommendations: For versions prior to 2.1, update to version 2.1 or later to resolve the issue. As a temporary workaround, consider restricting the file types that can be uploaded through the avatar upload functionality to prevent exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2015-0258

DLA-2125-1

USN-4590-1

Affected Products

Collabtive

Ubuntu

References · 11

• 🔥 http://packetstormsecurity.com/files/133736/Collabtive-2.0-Shell-Upload.html · Exploit
• https://github.com/philippK-de/Collabtive/commit/9ce6301583669d0a8ecb4d23fb56e34b68511335 · Patch
• https://usn.ubuntu.com/4590-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-0258 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2125-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4590-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-0258 · Security Note
• https://cve.org/CVERecord?id=CVE-2015-0258 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-0258 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4590-1 · Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/02/msg00031.html · Note