Authenticated Remote Code Execution in Xerte Toolkit
CVE-2021-44664

8.8HIGH

Key Information:

Vendor

Xerte

Status
Xerte
Vendor
CVE Published:
24 February 2022

What is CVE-2021-44664?

An authenticated remote code execution vulnerability exists in Xerte Toolkit version 3.9, specifically in the file upload component located at website_code/php/import/fileupload.php. Attackers can exploit this vulnerability by uploading a specially crafted PHP file disguised as a language file, effectively bypassing the upload filters in place. Furthermore, the vulnerability is exacerbated by a path traversal exploit, allowing attackers to manipulate the file's destination via the 'mediapath' variable, potentially executing arbitrary code on the server.

References

https://github.com/thexerteproject/xerteonlinetoolkits/co...
x_refsource_MISC
https://github.com/thexerteproject/xerteonlinetoolkits/co...
x_refsource_MISC
https://riklutz.nl/2021/11/03/authenticated-file-upload-t...
x_refsource_MISC

EPSS Score

12% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.