Vulnerability-Lookup

CNVD-2020-51252

Vulnerability from cnvd - Published: 2020-09-09

Title

Joomla!组件GMapFP未经验证任意文件上传漏洞

Description

Joomla!是一套开源的内容管理系统(CMS)。 Joomla!组件GMapFP存在安全漏洞。攻击者可利用漏洞访问应用程序的上传功能，无需对应用程序进行身份验证，上传文件，通过更改内容类型和文件名的双扩展名来绕过此问题。

Severity

高

Patch Name

Joomla!组件GMapFP未经验证任意文件上传漏洞的补丁

Patch Description

Joomla!是一套开源的内容管理系统(CMS)。 Joomla!组件GMapFP存在安全漏洞。攻击者可利用漏洞访问应用程序的上传功能，无需对应用程序进行身份验证，上传文件，通过更改内容类型和文件名的双扩展名来绕过此问题。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

用户可联系供应商获得补丁信息： https://gmapfp.org/

Reference

https://www.exploitalert.com/view-details.html?id=36104

Impacted products

Name
['Joomla! GMapFP J3.5', 'Joomla! GMapFP J3.5free']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-23972"
    }
  },
  "description": "Joomla!\u662f\u4e00\u5957\u5f00\u6e90\u7684\u5185\u5bb9\u7ba1\u7406\u7cfb\u7edf(CMS)\u3002\n\nJoomla!\u7ec4\u4ef6GMapFP\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u8bbf\u95ee\u5e94\u7528\u7a0b\u5e8f\u7684\u4e0a\u4f20\u529f\u80fd\uff0c\u65e0\u9700\u5bf9\u5e94\u7528\u7a0b\u5e8f\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\uff0c\u4e0a\u4f20\u6587\u4ef6\uff0c\u901a\u8fc7\u66f4\u6539\u5185\u5bb9\u7c7b\u578b\u548c\u6587\u4ef6\u540d\u7684\u53cc\u6269\u5c55\u540d\u6765\u7ed5\u8fc7\u6b64\u95ee\u9898\u3002",
  "formalWay": "\u7528\u6237\u53ef\u8054\u7cfb\u4f9b\u5e94\u5546\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://gmapfp.org/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-51252",
  "openTime": "2020-09-09",
  "patchDescription": "Joomla!\u662f\u4e00\u5957\u5f00\u6e90\u7684\u5185\u5bb9\u7ba1\u7406\u7cfb\u7edf(CMS)\u3002\r\n\r\nJoomla!\u7ec4\u4ef6GMapFP\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u8bbf\u95ee\u5e94\u7528\u7a0b\u5e8f\u7684\u4e0a\u4f20\u529f\u80fd\uff0c\u65e0\u9700\u5bf9\u5e94\u7528\u7a0b\u5e8f\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\uff0c\u4e0a\u4f20\u6587\u4ef6\uff0c\u901a\u8fc7\u66f4\u6539\u5185\u5bb9\u7c7b\u578b\u548c\u6587\u4ef6\u540d\u7684\u53cc\u6269\u5c55\u540d\u6765\u7ed5\u8fc7\u6b64\u95ee\u9898\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Joomla!\u7ec4\u4ef6GMapFP\u672a\u7ecf\u9a8c\u8bc1\u4efb\u610f\u6587\u4ef6\u4e0a\u4f20\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Joomla! GMapFP J3.5",
      "Joomla! GMapFP J3.5free"
    ]
  },
  "referenceLink": "https://www.exploitalert.com/view-details.html?id=36104",
  "serverity": "\u9ad8",
  "submitTime": "2020-09-09",
  "title": "Joomla!\u7ec4\u4ef6GMapFP\u672a\u7ecf\u9a8c\u8bc1\u4efb\u610f\u6587\u4ef6\u4e0a\u4f20\u6f0f\u6d1e"
}

CVE-2020-23972 (GCVE-0-2020-23972)

Vulnerability from cvelistv5 – Published: 2020-08-27 13:03 – Updated: 2024-08-04 15:05

Summary

In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions.

Severity

No CVSS data available.

CWE

Assigner

mitre

References

2 references

URL	Tags
https://raw.githubusercontent.com/me4yoursecurity…	x_refsource_MISC
http://packetstormsecurity.com/files/159072/Jooml…	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T15:05:11.658Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://raw.githubusercontent.com/me4yoursecurity/Reports/master/README.md"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/159072/Joomla-GMapFP-J3.5-J3.5F-Arbitrary-File-Upload.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-09-07T18:06:09.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://raw.githubusercontent.com/me4yoursecurity/Reports/master/README.md"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/159072/Joomla-GMapFP-J3.5-J3.5F-Arbitrary-File-Upload.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-23972",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://raw.githubusercontent.com/me4yoursecurity/Reports/master/README.md",
              "refsource": "MISC",
              "url": "https://raw.githubusercontent.com/me4yoursecurity/Reports/master/README.md"
            },
            {
              "name": "http://packetstormsecurity.com/files/159072/Joomla-GMapFP-J3.5-J3.5F-Arbitrary-File-Upload.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/159072/Joomla-GMapFP-J3.5-J3.5F-Arbitrary-File-Upload.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-23972",
    "datePublished": "2020-08-27T13:03:45.000Z",
    "dateReserved": "2020-08-13T00:00:00.000Z",
    "dateUpdated": "2024-08-04T15:05:11.658Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2020-51252

CVE-2020-23972 (GCVE-0-2020-23972)

Tags

Sightings

Nomenclature