Pimcore Unrestricted Upload of File with Dangerous Type
Summary
CVE-2019-16318: Pimcore Unrestricted Upload of File with Dangerous Type. Affects pimcore/pimcore versions < 5.7.1. Fixed in 5.7.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Pimcore is an open-source content management system (CMS) and product information management (PIM) platform. It is widely used for managing digital assets, creating websites, and organizing product data. Pimcore allows users to upload files, but a vulnerability in versions prior to 5.7.1 allows attackers with limited privileges to bypass file-extension restrictions. This can be achieved by using a 256-character filename, which prevents automatic renaming of files with dangerous types. It is important to note that this vulnerability is distinct from CVE-2019-10867 and CVE-2019-16317.
Vulnerability Detail
The vulnerability in Pimcore allows an attacker with limited privileges to upload files with dangerous types, bypassing the file-extension restrictions. By using a 256-character filename, the automatic renaming of files with dangerous types, such as .php, fails. This can lead to the execution of arbitrary code on the server, compromising the integrity and confidentiality of the system. The impact of this vulnerability is rated as HIGH with a CVSS score of 8.8.
How To Fix
Minimum fixed version
5.7.1
This is the first release that contains the fix.
composer require pimcore/pimcore:5.7.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update Pimcore to the latest version to mitigate the risk.
Conclusion
In conclusion, the Pimcore Unrestricted Upload of File with Dangerous Type vulnerability allows attackers with limited privileges to bypass file-extension restrictions and upload files with dangerous types. This can lead to the execution of arbitrary code on the server, posing a significant risk to the system's integrity and confidentiality. It is crucial to update Pimcore to version 5.7.1 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for pimcore/pimcore →
FAQ
Pimcore is an open-source content management system (CMS) and product information management (PIM) platform used for managing digital assets, creating websites, and organizing product data.
The vulnerability allows an attacker to bypass file-extension restrictions and upload files with dangerous types. This can lead to the execution of arbitrary code on the server, compromising the integrity and confidentiality of the system.
To fix this vulnerability, update Pimcore to version 5.7.1 or later. This version includes a fix for the file-extension restriction bypass issue.
There is no known workaround for this vulnerability. It is crucial to update Pimcore to the latest version to mitigate the risk.
No, this vulnerability is distinct from CVE-2019-10867 and CVE-2019-16317.
References
Related vulnerabilities
Recent vulnerabilities recorded for pimcore/pimcore.
