PT-2023-24193 · Xibo · Xibo

Noam Moshe · Published 2023-05-30 · Updated 2023-06-06 · CVE-2023-33177

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xibo versions prior to 2.3.17 Xibo versions prior to 3.3.5

Description A path traversal vulnerability exists in the Xibo CMS, allowing a specially crafted zip file to be uploaded via the layout import function by an authenticated user. This enables the creation of files outside of the CMS library directory as the webserver user, potentially leading to the upload of a PHP webshell inside the web root directory and achieving remote code execution as the webserver user.

Recommendations For versions prior to 2.3.17, upgrade to version 2.3.17 to resolve the issue. For versions prior to 3.3.5, upgrade to version 3.3.5 to resolve the issue. As a temporary workaround, consider restricting access to the layout import function to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-33177

GHSA-JJ27-X85Q-CRQV

Affected Products

Xibo

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/33xxx/CVE-2023-33177.json · Exploit
• https://github.com/xibosignage/xibo-cms/commit/1cbba380fa751a00756e70d7b08b5c6646092658 · Patch
• https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-jj27-x85q-crqv · Vendor Advisory
• https://github.com/xibosignage/xibo-cms/commit/45c6b53c3978639db03b63270a56f4397f49b2c9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-33177 · Security Note
• https://xibosignage.com/blog/security-advisory-2023-05 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-33177 · Vendor Advisory
• https://t.me/cvenotify/51417 · Telegram Post
• https://t.me/cvenotify/51826 · Telegram Post
• https://claroty.com/team82/disclosure-dashboard · Note