CRITICAL9.8

GHSA-77j2-7whr-6vpx

Elefant CMS Code Execution Vulnerability

Quick fix

GHSA-77j2-7whr-6vpx — elefant/cms: upgrade to the fixed version with the command below.

composer require elefant/cms:^2.0.7

Details

An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in `apps/filemanager/upload/drop.php` by using `/filemanager/api/rm/.htaccess` to remove the .htaccess file, and then using a filename that ends in .php followed by space characters (for bypassing the blacklist).

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/elefant/cms

Introduced in: 0Fixed in: 2.0.7

Fixcomposer require elefant/cms:^2.0.7

References

https://nvd.nist.gov/vuln/detail/CVE-2018-16974[ADVISORY]
https://github.com/jbroadway/elefant/issues/287[WEB]
https://github.com/jbroadway/elefant/commit/49ba8cc24e9f009ce30d2c2eb9eefeb9be4ce1d0[WEB]
https://github.com/jbroadway/elefant/releases/tag/elefant_2_0_7_stable[WEB]