PT-2023-29742 · Gibbon · Gibbon

Christian Poeschl · Published 2023-11-13 · Updated 2023-11-17 · CVE-2023-45880

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GibbonEdu Gibbon versions through 25.0.0

Description The issue allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The templateFileDestination parameter can be set to an arbitrary pathname (and extension), allowing creation of PHP files outside of the uploads directory, directly in the webroot.

Recommendations For versions through 25.0.0, consider disabling the report template builder feature until a patch is available to prevent exploitation. Restrict access to the templateFileDestination parameter to minimize the risk of creating malicious PHP files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-45880

Affected Products

Gibbon

References · 6

• 🔥 https://herolab.usd.de/security-advisories/usd-2023-0022 · Exploit
• https://osv.dev/vulnerability/CVE-2023-45880 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45880 · Security Note
• https://t.me/cvenotify/60617 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1724397737469227287 · Twitter Post
• https://twitter.com/CVEnew/status/1724301077514719253 · Twitter Post