PT-2024-30264 · Jpress · Jpress

Lazy-Forever · Published 2024-08-21 · Updated 2024-08-26 · CVE-2024-43033

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JPress versions through 5.1.1

Description The issue is an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to io.jpress.web.commons.controller.AttachmentController#upload. This vulnerability allows for potential code execution on the server.

Recommendations For JPress versions through 5.1.1, consider disabling the upload function in AttachmentController until a patch is available to prevent arbitrary file uploads and potential code execution. Restrict access to the AttachmentController to minimize the risk of exploitation. Avoid using the ::$DATA technique in file uploads to the affected AttachmentController until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-69

Related Identifiers

CVE-2024-43033

Affected Products

Jpress

References · 13

• 🔥 https://github.com/lazy-forever/CVE-Reference/tree/main/2024/43033 · Exploit
• https://github.com/JPressProjects/jpress/issues/188 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43033 · Security Note
• https://osv.dev/vulnerability/CVE-2024-43033 · Vendor Advisory
• https://t.me/cvenotify/91666 · Telegram Post
• https://cwe.mitre.org/data/definitions/69.html · Note
• https://twitter.com/cracbot/status/1828311527058718981 · Twitter Post
• https://twitter.com/CVEnew/status/1826443261441126803 · Twitter Post
• https://twitter.com/cracbot/status/1827949244944114135 · Twitter Post
• https://t.me/cvenotify/91668 · Telegram Post
• https://twitter.com/CveFindCom/status/1827007552267198976 · Twitter Post
• https://t.me/cvedetector/3847 · Telegram Post
• https://t.me/cvenotify/91760 · Telegram Post