SB2023020158 - Dangerous file upload in Pimcore CMS
Published: February 1, 2023
Security Bulletin ID
SB2023020158
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Dangerous file upload (CVE-ID: CVE-2023-23937)
The vulnerability allows a remote user to bypass implemented security restrictions.
The vulnerability exists due to insufficient validation of the file content-type during file upload when updating user profile. A remote user bypass security check by adding a valid signature (p.e. GIF89) and sending any invalid content-type. This could allow an authenticated user to upload HTML files with JS content that will be executed in the context of the domain.
Remediation
Install update from vendor's website.