Authenticated Directory Traversal Vulnerability in Silverpeas by Silverpeas
CVE-2018-19586

9.9CRITICAL

Key Information:

Vendor

Silverpeas

Status
Silverpeas
Vendor
CVE Published:
9 April 2019

What is CVE-2018-19586?

The issue involves an authenticated Directory Traversal vulnerability in Silverpeas versions 5.15 through 6.0.2. This flaw arises during file uploads, specifically due to improper handling in core/webapi/upload/FileUploadData.java. Regular users can exploit this vulnerability to write arbitrary files to the underlying system, executing commands with the privileges of the application user. This could allow attackers to upload harmful files, like executable JSP scripts, to a web-accessible directory, leading to potential system compromise.

References

https://github.com/Silverpeas/Silverpeas-Core/blob/d8c3bb...
x_refsource_MISC
https://www.bishopfox.com/news/2019/01/silverpeas-5-15-to...
x_refsource_MISC

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2018-19586 : Authenticated Directory Traversal Vulnerability in Silverpeas by Silverpeas