PT-2024-17387 · Quick.Cms · Quick.Cms

Rafael Pedrero · Published 2024-11-29 · Updated 2024-12-04 · CVE-2024-11992

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Quick.CMS version 6.7

Description The issue is an absolute path traversal vulnerability that could allow remote users to bypass intended restrictions and download any file if it has the appropriate permissions outside of documentroot configured on the server. This is achieved via the aDirFiles%5B0%5D parameter in the "admin.php" page. The vulnerability also allows an attacker to delete files stored on the server due to a lack of proper verification of user-supplied input.

Recommendations For Quick.CMS version 6.7, patch immediately to fix the path traversal flaw in admin.php. Additionally, audit logs for signs of exploit to ensure no unauthorized access or file deletion has occurred. As a temporary workaround, consider restricting access to the aDirFiles%5B0%5D parameter in the admin.php page to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-11992

Affected Products

Quick.Cms

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-11992 · Security Note
• https://twitter.com/CveFindCom/status/1862490384259043694 · Twitter Post
• https://incibe.es/en/incibe-cert/notices/aviso/path-traversal-vulnerability-quickcms · Note
• https://twitter.com/incibe_cert/status/1862487989365981593 · Twitter Post
• https://t.me/latest_high_impact_cve/1598 · Telegram Post
• https://t.me/cvenotify/102698 · Telegram Post
• https://twitter.com/cracbot/status/1864187985102880986 · Twitter Post
• https://twitter.com/oktsec/status/1862521488034746573 · Twitter Post
• https://twitter.com/CVEnew/status/1862491042815119542 · Twitter Post