CVE-2017-8082
published 2017-04-24CVE-2017-8082: concrete5 8.1.0 has CSRF in Thumbnail Editor in the File Manager, which allows remote attackers to disable the entire installation by merely tricking an admin…
PriorityP426medium6.5CVSS 3.0
AVNACLPRNUIRSUCNINAH
EPSS
1.20%
64.3th percentile
concrete5 8.1.0 has CSRF in Thumbnail Editor in the File Manager, which allows remote attackers to disable the entire installation by merely tricking an admin into viewing a malicious page involving the /tools/required/files/importers/imageeditor?fID=1&imgData= URI. This results in a site-wide denial of service making the site not accessible to any users or any administrators.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| concretecms | concrete_cms | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET EXPLOIT BlueCoat CAS v1.3.7.1 Report Email Command Injection attempt
suricata·2017-04-21
CVE-2016-9091 ET EXPLOIT BlueCoat CAS v1.3.7.1 Report Email Command Injection attempt
ET EXPLOIT BlueCoat CAS v1.3.7.1 Report Email Command Injection attempt
Rule: alert http any any -> $HOME_NET 8082 (msg:"ET EXPLOIT BlueCoat CAS v1.3.7.1 Report Email Command Injection attempt"; flow:established,to_server; http.method; content:"POST"; nocase; http.uri; content:"/report-email/send"; nocase; http.request_body; content:"/dev-report-overview.html"; nocase; content:"|3B|"; distance:0; pcre:"/\/dev-report-overview\.html[^\"]*?\x3b/i"; reference:cve,2016-9091; reference:url,www.exploit-db.com/exploits/41785/; reference:url,bto.bluecoat.com/security-advisory/sa138; classtype:web-application-attack; sid:2024234; rev:4; metadata:affected_product HTTP_Server, attack_target Web_Server, created_at 2017_04_21, cve CVE_2016_9091, deployment Internal, performance_impact Moderate, confide
No public exploits indexed.
No writeups or analysis indexed.
http://zeroday.insecurity.zone/exploits/concrete5_csrf_dos.txthttps://drive.google.com/open?id=0B3vXUYdNMECWZTd3SFRnUjllWk0https://twitter.com/insecurity/status/856066923146215425http://zeroday.insecurity.zone/exploits/concrete5_csrf_dos.txthttps://drive.google.com/open?id=0B3vXUYdNMECWZTd3SFRnUjllWk0https://twitter.com/insecurity/status/856066923146215425
2017-04-24
Published