Pimcore contains Unrestricted Upload of File with Dangerous Type
### Impact The upload functionality for updating user profile does not properly validate the file content-type, allowing any authenticated user to bypass this security check by adding a valid signature (p.e. GIF89) and sending any invalid content-type. This could allow an authenticated attacker to upload HTML files with JS content that will be executed in the context of the domain. ### Patches Update to version 10.5.16 or apply this patch manually https://github.com/pimcore/pimcore/pull/14125.patch
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-23937US | medium5.4 | — | ||
Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce.
The upload functionality for updating user profile does not properl… | ||||
references
External citations — patches, advisories, analysis.
- https://github.com/pimcore/pimcorePACKAGE
- https://github.com/pimcore/pimcore/commit/75a448ef8ac74424cf4e723afeb6d05f9eed872fWEB
- https://github.com/pimcore/pimcore/pull/14125WEB
- https://github.com/pimcore/pimcore/security/advisories/GHSA-8xv4-jj4h-qww6WEB
- https://huntr.dev/bounties/aa7ee076-d729-4fcc-9bcc-48bcbb8eac38WEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-23937ADVISORY
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan