CVE-2024-38529: Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
Summary
CVE-2024-38529: Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment. Affects admidio/admidio versions < 4.3.10. Fixed in 4.3.10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Admidio is an application used for managing member data and communication within organizations. It provides features such as email messaging, file attachments, and user management. However, a vulnerability has been discovered in the Message module of Admidio, allowing for remote code execution through arbitrary file upload in message attachments.
Vulnerability Detail
The vulnerability arises from the lack of file extension verification in the Message module of Admidio. This allows an attacker to upload a PHP file as an attachment, which can then be accessed publicly through a specific URL. By uploading a PHP web shell, an attacker can execute arbitrary commands on the server, potentially compromising the entire application server. This can lead to unauthorized access, data manipulation, installation of malicious software, and disruption of services.
How To Fix
Minimum fixed version
4.3.10
This is the first release that contains the fix.
composer require admidio/admidio:4.3.10Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
Admidio is vulnerable to remote code execution through arbitrary file upload in message attachments. This can be exploited by uploading a PHP web shell, leading to potential compromise of the application server. It is crucial to implement strict file extension verification to mitigate this vulnerability.
See every vulnerability recorded for admidio/admidio →
FAQ
Admidio is an application used for managing member data and communication within organizations.
The vulnerability allows for remote code execution, potentially leading to unauthorized access, data manipulation, installation of malicious software, and disruption of services.
An attacker can upload a PHP web shell as an attachment in a message, which can then be accessed publicly. By executing commands through the web shell, the attacker can compromise the application server.
Implement strict file extension verification in the Message module to only allow the upload of allowed file types. Reject any file uploads with disallowed or suspicious extensions.
Yes, the CVSS score for this vulnerability is 9.0.
References
Related vulnerabilities
Recent vulnerabilities recorded for admidio/admidio.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
