PT-2024-7909 · Unknown · Thinkadmin

P1Wy · Published 2024-11-03 · Updated 2024-11-06 · CVE-2024-10749

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ThinkAdmin versions up to 6.1.67

Description A critical issue was found in the function script of the file /app/admin/controller/api/Plugs.php, related to deserialization weaknesses. The manipulation of the uptoken argument leads to deserialization, allowing a remote attack. The complexity of an attack is rather high, and the exploitability is difficult. The exploit has been disclosed to the public and may be used, potentially impacting the confidentiality, integrity, and availability of protected information.

Recommendations For ThinkAdmin versions up to 6.1.67, patch immediately or isolate affected systems to prevent exploitation. As a temporary workaround, consider restricting access to the /app/admin/controller/api/Plugs.php file or disabling the vulnerable function script until a patch is available. Avoid using the uptoken argument in the affected API endpoint until the issue is resolved.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2024-09413

CVE-2024-10749

Affected Products

Thinkadmin

References · 12

• 🔥❌ https://github.com/pwysec/Xmwcq/blob/main/1.md · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2024-10749 · Security Note
• https://bdu.fstec.ru/vul/2024-09413 · Security Note
• https://osv.dev/vulnerability/CVE-2024-10749 · Vendor Advisory
• https://t.me/cvedetector/9665 · Telegram Post
• https://github.com/advisories/GHSA-r6cq-w3q4-7rwf · Note
• https://vuldb.com/?id.282918 · Note
• https://twitter.com/oktsec/status/1852978426262482958 · Twitter Post
• https://t.me/cvenotify/100804 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1853407838468485173 · Twitter Post
• https://vuldb.com/?submit.432436 · Note
• https://vuldb.com/?ctiid.282918 · Note