PT-2025-1365 · Ovidentia · Ovidentia

Nidal Guedouar · Published 2025-01-07 · Updated 2025-01-08 · CVE-2022-41573

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ovidentia version 8.3

Description A problem was discovered in the file upload feature, which does not prevent the uploading of executable files. A user can upload a .png file containing PHP code and then rename it to have the .php extension. The file will then be accessible at a "images/common/" URI for remote code execution.

Recommendations For Ovidentia version 8.3, consider disabling the file upload feature until a patch is available to prevent the uploading of executable files. Restrict access to the "images/common/" directory to minimize the risk of exploitation. Avoid allowing users to rename uploaded files to have executable extensions, such as .php, until the issue is resolved.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2022-41573

Affected Products

Ovidentia

References · 6

• 🔥 https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_CVE-2022-41573.txt · Exploit
• 🔥 https://github.com/Orange-Cyberdefense/CVE-repository · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-41573 · Security Note
• https://twitter.com/CVEnew/status/1876953355198562486 · Twitter Post
• https://bitbucket.org/cantico/ovidentia/branches · Note
• https://t.me/cvedetector/14605 · Telegram Post