PT-2024-21138 · Skinsoft · Skinsoft S-Museum

Published 2024-02-21 · Updated 2025-03-13 · CVE-2024-25801

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SKINsoft S-Museum version 7.02.3

Description The issue allows for arbitrary code execution via a crafted PDF file uploaded through the Add Media function. Additionally, it is possible to execute a cross-site scripting (XSS) attack by manipulating the filename of an uploaded file. The attack payload for the XSS is contained within the filename, not the file content.

Recommendations For SKINsoft S-Museum version 7.02.3, consider disabling the file upload functionality in the Add Media function until a patch is available. As a temporary workaround, restrict the types of files that can be uploaded to minimize the risk of exploitation. Avoid using the Add Media function with untrusted files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Unrestricted File Upload

Weakness Enumeration

CWE-79

CWE-434

Related Identifiers

CVE-2024-25801

Affected Products

Skinsoft S-Museum

References · 9

• https://osv.dev/vulnerability/CVE-2024-25801 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-25801 · Security Note
• https://t.me/cvenotify/100026 · Telegram Post
• https://t.me/cvenotify/72236 · Telegram Post
• https://t.me/cvenotify/72233 · Telegram Post
• https://t.me/cvenotify/72187 · Telegram Post
• https://shrouded-trowel-50c.notion.site/S-Museum-Version-7-02-3-Stored-Cross-Site-Scripting-69ca7b8805cc448ea12cb8f7ed571fa3?pvs=4 · Note
• https://t.me/cvenotify/114667 · Telegram Post
• https://twitter.com/CVEnew/status/1760533922398806191 · Twitter Post