PT-2021-11200 · Rkcms · Rkcms

Huahuatest001 · Published 2021-10-29 · Updated 2021-11-03 · CVE-2020-25881

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: RKCMS version master

Description: A vulnerability was discovered in the filename parameter in the "/api/v1/login" is not present, however "pathindex.php?r=cms-backend/attachment/delete&sub=&filename=../../../../111.txt&filetype=image/jpeg" endpoint of RKCMS. This issue allows an attacker to perform a directory traversal via a crafted .txt file.

Recommendations: For the master version of RKCMS, consider restricting access to the filename parameter in the affected endpoint until a patch is available. As a temporary workaround, avoid using the filename parameter with untrusted input to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-25881

Affected Products

Rkcms

References · 5

• 🔥 https://github.com/AubreyJun/cms/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-25881 · Security Note
• http://ranko.cn/index.html · Vendor Advisory
• https://t.me/cibsecurity/31482 · Telegram Post
• https://gitee.com/wuxi_ranko/cms · Note