CVE-2017-18195

Опубликовано: 26 фев. 2018

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An unauthenticated user can enumerate comments from all blog posts by POSTing requests to /index.php/tools/required/conversations/view_ajax with incremental 'cnvID' integers.

Ссылки

https://github.com/concrete5/concrete5/pull/6008/files
Patch
Third Party Advisory
https://github.com/concrete5/concrete5/releases/tag/8.3.0
Release Notes
Third Party Advisory
https://github.com/r3naissance/NSE/blob/master/http-vuln-cve2017-18195.nse
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/44194/
Exploit
Third Party Advisory
VDB Entry
https://github.com/concrete5/concrete5/pull/6008/files
Patch
Third Party Advisory
https://github.com/concrete5/concrete5/releases/tag/8.3.0
Release Notes
Third Party Advisory
https://github.com/r3naissance/NSE/blob/master/http-vuln-cve2017-18195.nse
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/44194/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*

Версия до 8.3.0 (исключая)

EPSS

Процентиль: 92%

0.08031

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-jmw2-5mfm-25x7