SB2018050801 - Arbitrary file upload in Liferay CMS
Published: May 8, 2018 Updated: November 4, 2021
Security Bulletin ID
SB2018050801
Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Arbitrary file upload (CVE-ID: CVE-2018-10795)
The vulnerability allows a remote attacker to compromise vulnerable system.The vulnerability exists due to an error in FCKeditor configuration, which can lead to unauthorized upload of files via the browser/liferay/browser.html?Type= and html/js/editor/fckeditor/editor/filemanager/browser/liferay/browser.html URLs. A remote unauthenticated attacker can send a specially crafted HTTP GET request to the affected scripts and upload malicious files to the server. The uploaded file will be automatically executed within the product's environment.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
Remediation
Install update from vendor's website.