PT-2021-11840 · Batflat · Batflat

Mari0X00 · Published 2021-02-15 · Updated 2024-08-04 · CVE-2020-35734

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Batflat version 1.3.6

Description: The issue allows an authenticated user to perform code injection, and consequently Remote Code Execution, via the input fields of the Users tab. To exploit this, one must login to the administration panel and edit an arbitrary user's data, such as username or displayed name. This issue only affects products that are no longer supported by the maintainer.

Recommendations: For version 1.3.6, as a temporary workaround, consider restricting access to the Users tab in the administration panel until a resolution can be determined, however, since the product is no longer supported, this may be the only available mitigation measure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2020-35734

Affected Products

Batflat

References · 8

• 🔥 https://github.com/sruupl/batflat/issues/98 · Exploit
• 🔥 https://secator.pl/index.php/2021/02/15/batflat-v-1-3-6-authenticated-remote-code-execution-public-disclosure · Exploit
• 🔥 http://packetstormsecurity.com/files/161457/Batflat-CMS-1.3.6-Remote-Code-Execution.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-35734 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35734 · Security Note
• https://batflat.org/en/changelog · Vendor Advisory
• https://t.me/cvenotify/84568 · Telegram Post
• https://t.me/cvenotify/10103 · Telegram Post