Umbraco CMS 'codeEditorSave.asmx' Arbitrary File Upload Vulnerability
BID:54351
Info
Umbraco CMS 'codeEditorSave.asmx' Arbitrary File Upload Vulnerability
| Bugtraq ID: | 54351 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 09 2012 12:00AM |
| Updated: | Jul 09 2012 12:00AM |
| Credit: | Toby Clarke |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Umbraco CMS 'codeEditorSave.asmx' Arbitrary File Upload Vulnerability
Umbraco CMS is prone to a vulnerability that lets attackers upload arbitrary files because it fails to properly authorize users before allowing them to perform certain actions.
An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the web server process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.
Umbraco CMS 4.7.0.378 is vulnerable; other versions may also be affected.
Umbraco CMS is prone to a vulnerability that lets attackers upload arbitrary files because it fails to properly authorize users before allowing them to perform certain actions.
An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the web server process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.
Umbraco CMS 4.7.0.378 is vulnerable; other versions may also be affected.
Exploit / POC
Umbraco CMS 'codeEditorSave.asmx' Arbitrary File Upload Vulnerability
Attackers can exploit this issue through a browser.
The following exploit code is available:
Attackers can exploit this issue through a browser.
The following exploit code is available:
Solution / Fix
Umbraco CMS 'codeEditorSave.asmx' Arbitrary File Upload Vulnerability
Solution:
Reports indicate that this issue has been fixed by the vendor. Please contact the vendor for more information.
Solution:
Reports indicate that this issue has been fixed by the vendor. Please contact the vendor for more information.
References
Umbraco CMS 'codeEditorSave.asmx' Arbitrary File Upload Vulnerability
References:
References:
- Umbraco CMS Homepage (Umbraco)