PT-2021-10337 · Vaethink · Vaethink

Mrdoulestar · Published 2021-08-03 · Updated 2021-08-11 · CVE-2020-19302

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: vaeThink version 1.0.1

Description: The issue concerns an arbitrary file upload vulnerability in the avatar upload function. This vulnerability allows attackers to open a webshell by changing the uploaded file suffixes to ".php".

Recommendations: For vaeThink version 1.0.1, consider disabling the avatar upload function until a patch is available to prevent exploitation. Restrict access to the upload functionality to minimize the risk of attackers uploading malicious files. Avoid using the avatar upload feature with files that have the ".php" suffix until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-19302

Affected Products

Vaethink

References · 4

• 🔥 https://github.com/tingyuu/vaeThink/issues/2 · Exploit
• https://osv.dev/vulnerability/CVE-2020-19302 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-19302 · Security Note
• https://t.me/cvenotify/19133 · Telegram Post