8.8high
CVE-2017-18048in critical feed1 exploit
Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
8.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
63.4%
percentile 99%
Public exploits
1
Metasploit
Summary
Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not.
Exploit prediction (EPSS)
63.35% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.
Exploits and detections
- Metasploit exploit/multi/http/monstra_fileupload_exec Monstra CMS Authenticated Arbitrary File Upload · metasploit exploit, excellent rank · 2017-12-18
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 8.8 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Classification
- Weakness
- CWE-434 Unrestricted Upload of File with Dangerous Type
References
- github.com /monstra-cms/monstra/issues/426 · x_refsource_MISC, x_transferred
- exploit-db.com /exploits/43348/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- securityprince.blogspot.in /2017/12/monstra-cms-304-arbitrary-file-upload.html · x_refsource_MISC, x_transferred
- blogs.securiteam.com /index.php/archives/3559 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2017-18048
- NVD: CVE-2017-18048
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.