Multiple vulnerabilities in MonoX



Published: 2020-05-05
Risk High
Patch available NO
Number of vulnerabilities 4
CVE-ID CVE-2020-12473
CVE-2020-12471
CVE-2020-12470
CVE-2020-12472
CWE-ID CWE-264
CWE-502
CWE-79
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe 		MonoX
Web applications / Modules and components for CMS

Vendor Mono

Security Bulletin

This security bulletin contains information about 4 vulnerabilities.

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU27527

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2020-12473

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions. A remote administrator can reconfigure the Converter Executable setting from "ffmpeg.exe" to a different program, escalate privileges on the target system and execute arbitrary code.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

MonoX: 5.1.40.5152

CPE2.3 External links

http://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Privilege%20Escalation%20via%20ConvertVideo

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

2) Deserialization of Untrusted Data

EUVDB-ID: #VU27526

Risk: High

CVSSv3.1:

CVE-ID: CVE-2020-12471

CWE-ID: CWE-502 - Deserialization of Untrusted Data

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to insecure input validation when processing serialized data in "HTML5Upload.ashx" or "Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx". A remote attacker can pass specially crafted data to the application and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

This vulnerability affects the following classes:

  • MonoX.MonoSoftware.MonoX.ModuleGallery.HTML5Upload
  • MonoX.MonoSoftware.MonoX.ModuleGallery.SilverLightUploadModule
  • MonoX.MonoSoftware.MonoX.HTML5Upload
  • MonoX.MonoSoftware.MonoX.SilverLightUploadHandler

Mitigation

Install updates from vendor's website.

Vulnerable software versions

MonoX: All versions

CPE2.3 External links

http://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Remote%20Code%20Execution%20via%20Insecure%20Deserialization

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

3) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU27525

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2020-12470

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions in the "ctlUpload_radUploadfile0" parameter in "MonoX.MonoSoftware.MonoX.Admin.PageManagerPageTemplates" file. A remote administrator can modify ASPX templates for the entire site, gain elevated privileges and execute arbitrary code.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

MonoX: 5.1.40.5152

CPE2.3 External links

http://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Privilege%20Escalation%20via%20Template%20Modification

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

4) Stored cross-site scripting

EUVDB-ID: #VU27524

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2020-12472

CWE-ID: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Exploit availability: No

Description

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to insufficient sanitization of user-supplied data in User Status, Blog Comments, or Blog Description. A remote authenticated attacker can permanently inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability..

Vulnerable software versions

MonoX: 5.1.40.5152

CPE2.3 External links

http://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Multiple%20Cross-Site-Scripting

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?



###SIDEBAR###