CVE-2024-38529
published 2024-07-29CVE-2024-38529: Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.10, there is a Remote Code…
PriorityP258high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
1.17%
63.6th percentile
Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.10, there is a Remote Code Execution Vulnerability in the Message module of the Admidio Application, where it is possible to upload a PHP file in the attachment. The uploaded file can be accessed publicly through the URL `{admidio_base_url}/adm_my_files/messages_attachments/{file_name}`. The vulnerability is caused due to the lack of file extension verification, allowing malicious files to be uploaded to the server and public availability of the uploaded file. This vulnerability is fixed in 4.3.10.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| admidio | admidio | < 4.3.10 | 4.3.10 |
| admidio | admidio | >= 0 < 4.3.10 | 4.3.10 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
ghsa·2024-07-29
CVE-2024-38529 [CRITICAL] CWE-434 Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
### Description:
Remote Code Execution Vulnerability has been identified in the Message module of the Admidio Application, where it is possible to upload a PHP file in the attachment. The uploaded file can be accessed publicly through the URL `{admidio_base_url}/adm_my_files/messages_attachments/{file_name}`.
The vulnerability is caused due to the lack of file extension verification, allowing malicious files to be uploaded to the server and public availability of the uploaded file.
An attacker can upload a PHP web shell that executes OS commands on the server, compromising the application server.
Note: I am using the docker-compose.yaml file from https://github.com/Admidio/admidio/blob/master/README-Docker.md#doc
OSV
Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
osv·2024-07-29
CVE-2024-38529 [CRITICAL] Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
### Description:
Remote Code Execution Vulnerability has been identified in the Message module of the Admidio Application, where it is possible to upload a PHP file in the attachment. The uploaded file can be accessed publicly through the URL `{admidio_base_url}/adm_my_files/messages_attachments/{file_name}`.
The vulnerability is caused due to the lack of file extension verification, allowing malicious files to be uploaded to the server and public availability of the uploaded file.
An attacker can upload a PHP web shell that executes OS commands on the server, compromising the application server.
Note: I am using the docker-compose.yaml file from https://github.com/Admidio/admidio/blob/master/README-Docker.md#doc
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/Admidio/admidio/commit/3b1cc1cda05747edebe15f2825b79bc5a673d94chttps://github.com/Admidio/admidio/security/advisories/GHSA-g872-jwwr-vggmhttps://github.com/Admidio/admidio/commit/3b1cc1cda05747edebe15f2825b79bc5a673d94chttps://github.com/Admidio/admidio/security/advisories/GHSA-g872-jwwr-vggm
2024-07-29
Published