PT-2024-31989 · Ypay · Ypay

Potatowo233 · Published 2024-09-27 · Updated 2024-10-02 · CVE-2024-46441

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions YPay version 1.2.0

Description An arbitrary file upload vulnerability allows attackers to execute arbitrary code via a ZIP archive to themePutFile in app/common/util/Upload.php, which is called from app/admin/controller/ypay/Home.php. The file extension of an uncompressed file is not checked.

Recommendations For YPay version 1.2.0, as a temporary workaround, consider disabling the themePutFile function in app/common/util/Upload.php until a patch is available. Restrict access to the Upload.php module to minimize the risk of exploitation. Avoid using the themePutFile function in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-46441

Affected Products

Ypay

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-46441 · Security Note
• https://osv.dev/vulnerability/CVE-2024-46441 · Vendor Advisory
• https://github.com/kacins/YPay/issues/4 · Note
• https://twitter.com/cracbot/status/1841357506020507832 · Twitter Post
• https://t.me/cvenotify/96319 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1839721259887645118 · Twitter Post
• https://twitter.com/CVEnew/status/1839651745330254266 · Twitter Post