PT-2022-16881 · C1 Cms · C1 Cms

Jarlob + 1 · Published 2022-03-28 · Updated 2022-04-05 · CVE-2022-24789

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions C1 CMS versions prior to 6.12

Description The issue allows an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. This can also lead to truncating arbitrary files to zero size, effectively deleting them, which can cause denial of service (DoS) or alter application logic. An authenticated user may unknowingly perform these actions by visiting a specially crafted site.

Recommendations For versions prior to 6.12, update to C1 CMS version 6.12 to resolve the issue.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2022-24789

GHSA-8PP6-8X4Q-C5MX

GHSA-J9C2-GR6M-PP45

Affected Products

C1 Cms

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24789.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-24789 · Security Note
• https://osv.dev/vulnerability/CVE-2022-24789 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8pp6-8x4q-c5mx · Vendor Advisory
• https://github.com/Orckestra/C1-CMS-Foundation/security/advisories/GHSA-j9c2-gr6m-pp45 · Note
• https://github.com/Orckestra/C1-CMS-Foundation/releases/tag/v6.12 · Note
• https://github.com/Orckestra/C1-CMS-Foundation · Note