PT-2024-27265 · Opengnsys · Opengnsys

Antonio José Gálvez Sánchez + 2 · Published 2024-04-12 · Updated 2024-07-05 · CVE-2024-3705

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenGnsys version 1.1.1d (Espeto)

Description The issue allows an attacker to send a POST request to the endpoint '/opengnsys/images/M Icons.php' and modify the file extension due to a lack of file extension verification. This results in a webshell injection.

Recommendations For OpenGnsys version 1.1.1d (Espeto), as a temporary workaround, consider restricting access to the '/opengnsys/images/M Icons.php' endpoint until a patch is available. Additionally, implement file extension verification to prevent unauthorized file uploads.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-3705

Affected Products

Opengnsys

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-3705 · Security Note
• https://osv.dev/vulnerability/CVE-2024-3705 · Vendor Advisory
• https://opengnsys.es/web/parche-de-seguridad-cve-2024-370x · Vendor Advisory, Patch
• https://t.me/cvenotify/76582 · Telegram Post
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-opengnsys · Note
• https://t.me/cvenotify/85197 · Telegram Post