Vulnerability Description
Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences. Attackers can manipulate the theme_name parameter in the themeexporthandle action or supply base64-encoded file paths to the downfile action to retrieve sensitive files outside intended directories.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Njtech | Greencms | >= 2.1.0612, <= 2.3.0603 |
Related Weaknesses (CWE)
References
- http://www.greencms.net/Broken Link
- https://codeload.github.com/GreenCMS/GreenCMS/zip/betaProduct
- https://www.exploit-db.com/exploits/46245ExploitThird Party AdvisoryVDB Entry
- https://www.vulncheck.com/advisories/green-cms-2-x-path-traversal-arbitrary-fileThird Party Advisory
FAQ
What is CVE-2019-25574?
CVE-2019-25574 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences. Attackers can manipula...
How severe is CVE-2019-25574?
CVE-2019-25574 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-25574?
Check the references section above for vendor advisories and patch information. Affected products include: Njtech Greencms.