PT-2021-11276 · Objectplanet · Objectplanet Opinio

Published 2021-07-31 · Updated 2021-08-09 · CVE-2020-26806

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: ObjectPlanet Opinio versions prior to 7.15

Description: The issue allows Unrestricted File Upload of executable JSP files, resulting in remote code execution. This is because the filePath can have directory traversal and the fileContent can be valid JSP code. The vulnerability is exploited through the "admin/file.do" endpoint.

Recommendations: For versions prior to 7.15, update to version 7.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the "admin/file.do" endpoint to minimize the risk of exploitation. Additionally, restrict the use of the filePath and fileContent variables to prevent directory traversal and execution of malicious JSP code.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-26806

Affected Products

Objectplanet Opinio

References · 6

• 🔥 https://packetstormsecurity.com/files/163709/ObjectPlanet-Opinio-7.13-Shell-Upload.html · Exploit
• https://objectplanet.com/opinio/changelog.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26806 · Security Note
• https://osv.dev/vulnerability/CVE-2020-26806 · Vendor Advisory
• https://t.me/cvenotify/18413 · Telegram Post
• https://t.me/cibsecurity/26646 · Telegram Post