Arbitrary File Upload Affecting microweber/microweber package, versions <1.2.3
Threat Intelligence
Exploit Maturity
Proof of concept
EPSS
0.05% (22nd
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PHP-MICROWEBERMICROWEBER-570048
- published 21 May 2020
- disclosed 21 May 2020
- credit Unknown
Introduced: 21 May 2020
CVE-2020-13241 Open this link in a new tabHow to fix?
Upgrade microweber/microweber to version 1.2.3 or higher.
Overview
microweber/microweber is a new generation CMS with drag and drop.
Affected versions of this package are vulnerable to Arbitrary File Upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the file extension (used with the Add Image option on the Edit User screen) corresponds to an image file.
PoC
- Login into your Microweber account
- Go to admin page
- Go to Users -> My Profile -> Edit User
- Try to Upload any image extension. It will successfully update.
- Now, download any web shell from google and modify the extension.
- capture the request of upload profile in burp and modify image extension (Eg- test.php.png)
- It will successfully upload the web shell.
References
CVSS Scores
version 3.1