CSRF in Clippercms
CVE-2018-19135
ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an attacker to perform actions for an admin (or any user with the file upload capability). With this vulnerability, one can automatically upload files (by default, it allows html, pdf, xml, zip, and many other file types). A file can be accessed publicly under the "/assets/files" directory.
Vulnerability class: CSRF (Cross-Site Request Forgery)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.030 (86.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 87th percentile — 86.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.030 · newest: 0.030 · change: 0.000
Affected products
- Clippercms — versions 1.3.3
Weakness classification (CWE)
References
- github.com/ClipperCMS/ClipperCMS/issues/494 (Exploit, Third Party Advisory, Issue Tracking)
- www.exploit-db.com/exploits/45839/ (Exploit, VDB Entry, Third Party Advisory, exploit)
Frequently asked questions
- What is CVE-2018-19135?
- CVE-2018-19135 is a high-severity vulnerability in Clippercms, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2018-11-11.
- How severe is CVE-2018-19135?
- High severity. CVSS v3 base score is 8.8 out of 10.