Path Traversal Vulnerability in MasaCMS by MasaCMS
CVE-2021-42183
7.5HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2021-42183?
MasaCMS 7.2.1 is affected by a path traversal vulnerability that can be exploited through the /index.cfm/_api/asset/image/ endpoint. This flaw allows an attacker to manipulate file paths, potentially gaining unauthorized access to sensitive files and directories. Proper input validation and secure coding practices should be implemented to mitigate this risk. It is crucial for users of MasaCMS to review their configurations and apply necessary updates to safeguard their systems.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.