CVE-2020-27386

Katalog CVE

CVSS 8.8 · High EPSS 72,9%

Kerentanan Unrestricted Upload of File with Dangerous Type pada flexdotnetcms project flexdotnetcms. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary files by using the FileManager to upload malicious code (e.g., ASP code) in the form of a safe file type (e.g., a TXT file), and then using the FileEditor (in v1.5.8 and prior) or the FileManager's rename function (in v1.5.7 and prior) to rename the file to an executable extension (e.g., ASP), and finally executing the file via an HTTP GET request to /<path_to_file>.

Rincian

Terbit di NVD

12 November 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

72,9% peluang dieksploitasi; lebih tinggi dari 99,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/rapid7/metasploit-framework/pull/14339 exploit · patch · advisory pihak ketiga
• http://packetstormsecurity.com/files/160411/FlexDotnetCMS-1.5.8-Arbitrary-ASP-File-Upload.html advisory pihak ketiga · vdb entry
• https://blog.vonahi.io/whats-in-a-re-name/ exploit · advisory pihak ketiga
• https://github.com/MacdonaldRobinson/FlexDotnetCMS/releases/tag/v1.5.9 release notes · advisory pihak ketiga