CVE-2017-9069: MODX Revolution Allows Overwriting .htaccess Files
Summary
CVE-2017-9069: MODX Revolution allows overwriting .htaccess. Affects modx/revolution versions < 2.5.7. Fixed in 2.5.7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MODX Revolution is a popular open-source content management system (CMS) that allows users to create and manage websites with ease. It provides a flexible framework for developers and a user-friendly interface for content editors. However, prior to version 2.5.7, MODX Revolution had a critical vulnerability that allowed users with file upload permissions to overwrite the .htaccess file, which could lead to severe security risks.
Vulnerability Detail
In MODX Revolution versions before 2.5.7, a flaw exists that permits users with file upload capabilities to upload files named .htaccess. This can lead to arbitrary code execution, as the .htaccess file can be manipulated to change server configurations, potentially allowing attackers to execute malicious scripts or redirect users to harmful sites. The vulnerability is classified under CWE-434, which pertains to the improper handling of file uploads.
How To Fix
Minimum fixed version
2.5.7
This is the first release that contains the fix.
composer require modx/revolution:2.5.7Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict file upload permissions for users who do not require them. Additionally, you can implement server-side checks to prevent the upload of files with the name .htaccess.
Conclusion
The vulnerability identified as CVE-2017-9069 in MODX Revolution allows unauthorized users to overwrite .htaccess files, leading to potential security breaches. It is crucial to update to version 2.5.7 or later to mitigate this risk. Additionally, implementing strict file upload policies can help protect against similar vulnerabilities.
See every vulnerability recorded for modx/revolution →
FAQ
The CVSS score for this vulnerability is 8.8, indicating a high severity level.
Any instance of MODX Revolution prior to version 2.5.7 that allows file uploads is at risk.
An attacker could execute arbitrary code on the server, potentially leading to data breaches or complete server takeover.
You can use Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without needing to sign up.
Yes, you can restrict file upload permissions and implement server-side checks to prevent .htaccess file uploads as a temporary measure.
Related vulnerabilities
Recent vulnerabilities recorded for modx/revolution.
