PT-2022-9891 · Unknown · Horizontcms

Published 2022-04-05 · Updated 2022-04-15 · CVE-2021-28428

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HorizontCMS versions prior to 1.0.0-beta.3

Description The issue allows for remote code execution by uploading specific files, such as .htaccess and *.hello files, through the Media Files upload functionality. This bypasses the filter that was put in place to restrict PHP extensions, thus allowing the execution of PHP code.

Recommendations For versions prior to 1.0.0-beta.3, update to version 1.0.0-beta.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the Media Files upload functionality to minimize the risk of exploitation.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-28428

Affected Products

Horizontcms

References · 7

• https://github.com/ttimot24/HorizontCMS/commit/9c4d6827cbe96decec6834d53660e14ab2bf8838 · Patch
• https://osv.dev/vulnerability/CVE-2021-28428 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28428 · Security Note
• https://github.com/ttimot24/HorizontCMS · Note
• https://t.me/cvenotify/29057 · Telegram Post
• https://t.me/cvenotify/28464 · Telegram Post
• https://t.me/cibsecurity/40187 · Telegram Post