CVE-2019-19634: verot/class.upload.php - Dangerous File Extension Omission
Summary
CVE-2019-19634: class.upload.php in verot.net omits .pht from the set of dangerous file extensions. Affects verot/class.upload.php across 2 version ranges.
< 1.0.3
>= 2.0.0, <= 2.0.4
No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
verot/class.upload.php is a PHP library that provides image manipulation capabilities. It is commonly used in various applications, including the K2 extension for Joomla!. The library allows users to upload and process images on a web server.
Vulnerability Detail
The vulnerability (CVE-2019-19634) in verot/class.upload.php versions 1.0.3 and 2.0.4, as well as prior versions, arises from the omission of the .pht file extension from the set of dangerous file extensions. This oversight allows attackers to upload and execute arbitrary PHP files with the .pht extension, potentially leading to remote code execution and unauthorized access to the server. This vulnerability is similar to CVE-2019-19576.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can manually add the .pht file extension to the list of dangerous file extensions in the class.upload.php file. This can be done by modifying the code responsible for checking file extensions and including '.pht' in the list. However, it is strongly advised to apply the official fix by updating to a secure version of the library.
Conclusion
The vulnerability in verot/class.upload.php allows for the execution of arbitrary PHP files with the .pht extension, potentially leading to remote code execution and unauthorized access. It is crucial to update the library to a secure version or apply the provided workaround to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for verot/class.upload.php →
FAQ
This vulnerability allows attackers to upload and execute arbitrary PHP files with the .pht extension, potentially leading to remote code execution and unauthorized access to the server.
Versions 1.0.3 and 2.0.4, as well as prior versions, are affected by this vulnerability.
Yes, updating the verot/class.upload.php library to version 1.0.4 or 2.0.5, or any subsequent secure release, will fix this vulnerability.
Yes, a temporary workaround involves adding the .pht file extension to the list of dangerous file extensions in the class.upload.php file. However, it is recommended to apply the official fix by updating to a secure version of the library.
You can find more information about this vulnerability in the GitHub Advisory Database: [link to the vulnerability details]
References
Related vulnerabilities
Recent vulnerabilities recorded for verot/class.upload.php.
