PT-2021-16896 · Unknown · Camaleon Cms

Published 2021-10-20 · Updated 2022-05-24 · CVE-2021-25972

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Camaleon CMS versions 2.1.2.0 through 2.6.0

Description The issue concerns a Server-Side Request Forgery (SSRF) vulnerability in the media upload feature. This feature allows admin users to fetch media files from external URLs but fails to validate URLs referencing localhost or other internal servers, enabling attackers to read files stored on the internal server.

Recommendations For Camaleon CMS versions 2.1.2.0 through 2.6.0, as a temporary workaround, consider disabling the media upload feature until a patch is available. Restrict access to the media upload module to minimize the risk of exploitation. Avoid using the media upload feature to fetch files from external URLs until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2021-25972

GHSA-VX6P-Q4GJ-X6XX

Affected Products

Camaleon Cms

References · 9

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/CVE-2021-25972.yml · Exploit
• https://github.com/owen2345/camaleon-cms/commit/5a252d537411fdd0127714d66c1d76069dc7e190 · Patch
• https://osv.dev/vulnerability/GHSA-vx6p-q4gj-x6xx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25972 · Security Note
• https://osv.dev/vulnerability/CVE-2021-25972 · Vendor Advisory
• https://github.com/owen2345/camaleon-cms · Note
• https://t.me/cibsecurity/30895 · Telegram Post
• https://t.me/cvenotify/22367 · Telegram Post
• https://whitesourcesoftware.com/vulnerability-database/CVE-2021-25972 · Note