Authenticated Arbitrary File Upload in Zenphoto by Zenphoto Team

CVE-2020-36079

What is CVE-2020-36079?

Zenphoto version 1.5.7 is susceptible to an authenticated arbitrary file upload vulnerability. This flaw allows authenticated users with the right permissions to upload potentially malicious files, such as PHP scripts, to the server. The vulnerability arises within the uploader plugin when an admin user engages with the elFinder interface, permitting drag-and-drop uploads into the Files section. Such an attack could compromise the server by placing a malicious file within the uploaded directory, enabling remote code execution. The vendor has expressed that exploitation is restricted to admin users, who may already possess extensive access and capabilities to jeopardize site security.

References