PT-2024-36520 · Ujcms · Ujcms

Published 2024-12-16 · Updated 2024-12-17 · CVE-2024-55452

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions UJCMS version 9.6.3

Description A URL redirection vulnerability exists in UJCMS due to improper validation of URLs in the upload and rendering of new block/carousel items. This issue allows authenticated attackers to redirect unprivileged users to an arbitrary, attacker-controlled webpage. When an authenticated user clicks on the malicious block item, they are redirected to arbitrary untrusted domains, where sensitive tokens, such as JSON Web Tokens, can be stolen via a crafted webpage.

Recommendations For UJCMS version 9.6.3, as a temporary workaround, consider disabling the upload and rendering of new block/carousel items until a patch is available. Restrict access to the block/carousel feature to minimize the risk of exploitation. Avoid using the vulnerable URL redirection functionality in the affected UJCMS version until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2024-55452

Affected Products

Ujcms

References · 8

• 🔥 https://github.com/cydtseng/Vulnerability-Research/blob/main/ujcms/OpenRedirect-BlockItemUpload.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-55452 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-55452 · Security Note
• https://github.com/dromara/ujcms · Note
• https://t.me/cvenotify/104475 · Telegram Post
• https://t.me/cvedetector/13054 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1868912442429829623 · Twitter Post
• https://twitter.com/CVEnew/status/1868790790878589381 · Twitter Post