File Deletion Vulnerability in GreenCMS by GreenCMS
CVE-2018-19329

4.9MEDIUM

Key Information:

Vendor

Greencms

Status
Greencms
Vendor
CVE Published:
17 November 2018

What is CVE-2018-19329?

GreenCMS v2.3.0603 contains a vulnerability that allows remote authenticated administrators to delete arbitrary files by manipulating a base64-encoded pathname in a specific deletion request. This can be achieved via the administrative interface, posing a risk of unauthorized data loss.

References

https://github.com/GreenCMS/GreenCMS/issues/113
x_refsource_MISC

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.