PT-2024-5821 · Fastadmin · Fastadmin

Rabbit + 1 · Published 2024-08-19 · Updated 2026-02-13 · CVE-2024-7928

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FastAdmin versions prior to 1.3.4.20220530

Description A problematic issue exists in FastAdmin related to improper path restriction within the /index/ajax/lang component. This allows for path traversal, potentially enabling remote attackers to access sensitive information. The issue affects an unknown functionality within the /index/ajax/lang file, where manipulation of the lang parameter can lead to unauthorized data access. Reports indicate that approximately 14,000 instances may be affected yearly. Exploitation of this issue has been publicly disclosed and is being actively used to retrieve database details. The API endpoint /index/ajax/lang is involved, and the lang parameter is a vulnerable parameter.

Recommendations Upgrade to FastAdmin version 1.3.4.20220530 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2024-06566

CVE-2024-7928

Affected Products

Fastadmin

References · 30

• 🔥 https://github.com/bigb0x/CVE-2024-7928 · Exploit
• 🔥 https://github.com/gh-ost00/CVE-2024-7928 · Exploit
• 🔥 https://github.com/fa-rrel/CVE-2024-7928 · Exploit
• 🔥 https://wiki.shikangsi.com/post/share/da0292b8-0f92-4e6e-bdb7-73f47b901acd · Exploit
• 🔥 https://github.com/wh6amiGit/CVE-2024-7928 · Exploit
• https://bdu.fstec.ru/vul/2024-06566 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-7928 · Security Note
• https://osv.dev/vulnerability/CVE-2024-7928 · Vendor Advisory
• https://twitter.com/Mr_Dark55/status/1825763285028770187 · Twitter Post
• https://twitter.com/SonicWall/status/1829557953453576478 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1825697507382382812 · Twitter Post
• https://twitter.com/th3gokul/status/1827043109689290822 · Twitter Post
• https://twitter.com/0x_threat_actor/status/1827058628093706371 · Twitter Post
• https://twitter.com/DarkWebInformer/status/1825964036032528676 · Twitter Post
• https://twitter.com/bytecodesky/status/1826789987532071289 · Twitter Post