CVE-2019-10867

Опубликовано: 04 апр. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Средний

Описание

An issue was discovered in Pimcore before 5.7.1. An attacker with classes permission can send a POST request to /admin/class/bulk-commit, which will make it possible to exploit the unserialize function when passing untrusted values in the data parameter to bundles/AdminBundle/Controller/Admin/DataObject/ClassController.php.

Ссылки

http://packetstormsecurity.com/files/152667/Pimcore-Unserialize-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://www.rapid7.com/db/modules/exploit/multi/http/pimcore_unserialize_rce
Third Party Advisory
https://blog.certimetergroup.com/it/articolo/security/polyglot_phar_deserialization_to_rce
https://github.com/pimcore/pimcore/commit/38a29e2f4f5f060a73974626952501cee05fda73
Patch
Third Party Advisory
https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-173998
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/46783/
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/152667/Pimcore-Unserialize-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://www.rapid7.com/db/modules/exploit/multi/http/pimcore_unserialize_rce
Third Party Advisory
https://blog.certimetergroup.com/it/articolo/security/polyglot_phar_deserialization_to_rce
https://github.com/pimcore/pimcore/commit/38a29e2f4f5f060a73974626952501cee05fda73
Patch
Third Party Advisory
https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-173998
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/46783/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*

Версия до 5.7.1 (исключая)

EPSS

Процентиль: 98%

0.53534

Средний

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-502

Связанные уязвимости

GHSA-7hqr-j26m-gmwp