PT-2022-23154 · Discourse · Discourse

Jomaxro · Published 2022-09-29 · Updated 2024-03-06 · CVE-2022-36066

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2.8.9 Discourse versions prior to 2.9.0.beta10

Description The issue allows admins to upload maliciously crafted Zip or Gzip Tar archives, enabling them to write files at arbitrary locations and trigger remote code execution.

Recommendations For versions prior to 2.8.9, update to version 2.8.9 or later on the stable branch. For versions prior to 2.9.0.beta10, update to version 2.9.0.beta10 or later on the beta and tests-passed branches.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BIT-DISCOURSE-2022-36066

CVE-2022-36066

GHSA-GRVH-QCPG-HFMV

Affected Products

Discourse

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/36xxx/CVE-2022-36066.json · Exploit
• https://github.com/discourse/discourse/commit/b27d5626d208a22c516a0adfda7554b67b493835 · Patch
• https://github.com/discourse/discourse/pull/18421 · Patch
• https://osv.dev/vulnerability/BIT-discourse-2022-36066 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36066 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36066 · Vendor Advisory
• https://github.com/discourse/discourse/security/advisories/GHSA-grvh-qcpg-hfmv · Note
• https://t.me/cibsecurity/50742 · Telegram Post