CVE-2012-5357

Опубликовано: 30 окт. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Высокий

Описание

Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data.

Ссылки

http://documentation.ektron.com/current/ReleaseNotes/Release8/8.02SP5.htm
Issue Tracking
Vendor Advisory
https://technet.microsoft.com/library/security/msvr12-016
Issue Tracking
Release Notes
Third Party Advisory
https://webstersprodigy.net/2012/10/25/cve-2012-5357cve-1012-5358-cool-ektron-xslt-rce-bugs/
Exploit
Issue Tracking
Third Party Advisory
https://www.rapid7.com/db/modules/exploit/windows/http/ektron_xslt_exec
Exploit
Issue Tracking
Third Party Advisory
http://documentation.ektron.com/current/ReleaseNotes/Release8/8.02SP5.htm
Issue Tracking
Vendor Advisory
https://technet.microsoft.com/library/security/msvr12-016
Issue Tracking
Release Notes
Third Party Advisory
https://webstersprodigy.net/2012/10/25/cve-2012-5357cve-1012-5358-cool-ektron-xslt-rce-bugs/
Exploit
Issue Tracking
Third Party Advisory
https://www.rapid7.com/db/modules/exploit/windows/http/ektron_xslt_exec
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ektron:ektron_content_management_system:*:sp4:*:*:*:*:*:*

Версия до 8.02 (включая)

EPSS

Процентиль: 99%

0.82595

Высокий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-19

Связанные уязвимости

GHSA-8hjq-53vf-885h