Vulnerability Description
An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary files by using the FileManager to upload malicious code (e.g., ASP code) in the form of a safe file type (e.g., a TXT file), and then using the FileEditor (in v1.5.8 and prior) or the FileManager's rename function (in v1.5.7 and prior) to rename the file to an executable extension (e.g., ASP), and finally executing the file via an HTTP GET request to /<path_to_file>.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Flexdotnetcms Project | Flexdotnetcms | < 1.5.9 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/160411/FlexDotnetCMS-1.5.8-Arbitrary-ASP-FiThird Party AdvisoryVDB Entry
- https://blog.vonahi.io/whats-in-a-re-name/ExploitThird Party Advisory
- https://github.com/MacdonaldRobinson/FlexDotnetCMS/releases/tag/v1.5.9Release NotesThird Party Advisory
- https://github.com/rapid7/metasploit-framework/pull/14339ExploitPatchThird Party Advisory
- http://packetstormsecurity.com/files/160411/FlexDotnetCMS-1.5.8-Arbitrary-ASP-FiThird Party AdvisoryVDB Entry
- https://blog.vonahi.io/whats-in-a-re-name/ExploitThird Party Advisory
- https://github.com/MacdonaldRobinson/FlexDotnetCMS/releases/tag/v1.5.9Release NotesThird Party Advisory
- https://github.com/rapid7/metasploit-framework/pull/14339ExploitPatchThird Party Advisory
FAQ
What is CVE-2020-27386?
CVE-2020-27386 is a vulnerability with a CVSS score of 8.8 (HIGH). An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary files by using the FileManager to upload malicious code (e.g., ...
How severe is CVE-2020-27386?
CVE-2020-27386 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-27386?
Check the references section above for vendor advisories and patch information. Affected products include: Flexdotnetcms Project Flexdotnetcms.