Pimcore contains Unrestricted Upload of File with Dangerous Type
### Impact The upload functionality for updating user profile does not properly validate the file content-type, allowing any authenticated user to bypass this security check by adding a valid signature (p.e. GIF89) and sending any invalid content-type. This could allow an authenticated attacker to upload HTML files with JS content that will be executed in the context of the domain. ### Patches Update to version 10.5.16 or apply this patch manually https://github.com/pimcore/pimcore/pull/14125.patch
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-23937US | medium5.4 | — | ||
Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce.
The upload functionality for updating user profile does not properl… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/pimcore/pimcorePACKAGE
- https://github.com/pimcore/pimcore/commit/75a448ef8ac74424cf4e723afeb6d05f9eed872fWEB
- https://github.com/pimcore/pimcore/pull/14125WEB
- https://github.com/pimcore/pimcore/security/advisories/GHSA-8xv4-jj4h-qww6WEB
- https://huntr.dev/bounties/aa7ee076-d729-4fcc-9bcc-48bcbb8eac38WEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-23937ADVISORY
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan