Arbitrary file upload in Machform
CVE-2018-6411
An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically adds dangerous extensions to the filters. If the filter is set to a whitelist, the dangerous extensions can be bypassed through ap_form_elements SQL Injection.
Vulnerability class: Unrestricted File Upload
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.058 (92.9th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 93rd percentile — 92.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.058 · newest: 0.058 · change: 0.000
Affected products
- Machform — versions 4.2.3
Weakness classification (CWE)
References
- metalamin.github.io/MachForm-not-0-day-EN/ (Exploit, Third Party Advisory)
- www.exploit-db.com/exploits/44804/ (Exploit, VDB Entry, Third Party Advisory, exploit)
- www.machform.com/blog-machform-423-security-release/ (Release Notes, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-6411?
- CVE-2018-6411 is a critical-severity vulnerability in Machform, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 9.8/10. Published 2018-05-26.
- How severe is CVE-2018-6411?
- Critical severity. CVSS v3 base score is 9.8 out of 10.