PT-2021-17344 · Unknown · Blackcat Cms

Published 2021-02-16 · Updated 2021-02-17 · CVE-2021-27237

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: BlackCat CMS version 1.3.6

Description: The issue concerns stored XSS in the admin panel of BlackCat CMS, specifically via the Display Name field. This occurs when an admin interacts with the "backend/preferences/ajax save.php" endpoint.

Recommendations: For BlackCat CMS version 1.3.6, consider restricting access to the Display Name field in the admin panel until a fix is available. As a temporary workaround, avoid using the Display Name field to prevent potential exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-27237

Affected Products

Blackcat Cms

References · 6

• 🔥 https://exploit-db.com/exploits/49565 · Exploit
• https://github.com/BlackCatDevelopment/BlackCatCMS/compare/1.3.6...1.4Beta · Patch
• https://github.com/BlackCatDevelopment/BlackCatCMS/commits/release-1.4/upload/backend/preferences/ajax_save.php · Patch
• https://osv.dev/vulnerability/CVE-2021-27237 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27237 · Security Note
• https://t.me/cibsecurity/23680 · Telegram Post