CVE-2023-48966: ThinkAdmin arbitrary file upload vulnerability
Summary
CVE-2023-48966: ThinkAdmin arbitrary file upload vulnerability. Affects zoujingli/thinkadmin versions < 6.1.53. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
ThinkAdmin is a package available on Packagist that provides a comprehensive administration panel for PHP applications. It offers various features such as user management, database management, and file management. However, an arbitrary file upload vulnerability has been discovered in ThinkAdmin version 6.1.53. This vulnerability allows attackers to execute arbitrary code by exploiting a flaw in the component '/admin/api.upload/file' when processing a crafted Zip file.
Vulnerability Detail
The arbitrary file upload vulnerability in ThinkAdmin v6.1.53 poses a significant risk to applications utilizing this package. Attackers can exploit this vulnerability by uploading a specially crafted Zip file, which can lead to the execution of arbitrary code on the server. This can result in unauthorized access, data manipulation, or even a complete compromise of the affected system. The severity of this vulnerability is rated as HIGH with a CVSS score of 8.8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, it is advised to disable the affected component '/admin/api.upload/file' or implement proper input validation and file type verification to prevent the upload of malicious files. Here is an example of how to disable the component in a ThinkAdmin configuration file:
// Disable file upload component
return [
'upload' => false,
];
Conclusion
The arbitrary file upload vulnerability in ThinkAdmin v6.1.53 poses a significant risk to applications utilizing this package. It is crucial to update to a version beyond 6.1.53 or apply the recommended workarounds to mitigate the risk. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for zoujingli/thinkadmin →
FAQ
This vulnerability allows attackers to upload and execute arbitrary code on the server, potentially leading to unauthorized access, data manipulation, or a complete compromise of the affected system.
ThinkAdmin version 6.1.53 is confirmed to be affected by this arbitrary file upload vulnerability.
Yes, the package maintainer has released subsequent versions of ThinkAdmin that include a patch for this vulnerability. It is recommended to update to a version beyond 6.1.53 to mitigate the risk.
As a temporary workaround, the affected component '/admin/api.upload/file' can be disabled or proper input validation and file type verification can be implemented to prevent the upload of malicious files.
This vulnerability is rated as HIGH with a CVSS score of 8.8.
References
Related vulnerabilities
Recent vulnerabilities recorded for zoujingli/thinkadmin.
