PT-2022-11960 · Digium · Quicklert For Digium

Nick Berrie · Published 2022-03-07 · Updated 2022-03-15 · CVE-2021-43970

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Quicklert for Digium version 10.0.0 (1043)

Description An arbitrary file upload issue exists in the albumimages.jsp file, allowing an authenticated attacker with low privileges to execute remote code on the target server within the context of the application's permissions. This is achieved by uploading a file with a .mp3;.jsp filename that begins with audio data bytes.

Recommendations For Quicklert for Digium version 10.0.0 (1043), consider restricting access to the albumimages.jsp file as a temporary workaround until a patch is available. Avoid using filenames that could be interpreted as executable code, such as those ending in .jsp, in the affected file upload functionality. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-43970

Affected Products

Quicklert For Digium

References · 5

• 🔥 https://assurainc.com/assura-announces-discovery-of-two-vulnerabilities-in-quicklert-for-digium-switchvox/amp-on · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-43970 · Security Note
• https://quicklert.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-43970 · Vendor Advisory
• https://t.me/cibsecurity/38652 · Telegram Post