HIGH7.2

GHSA-m899-6mh4-mpc5

MODX Revolution Incorrect Access Control vulnerability

Quick fix

GHSA-m899-6mh4-mpc5 — modx/revolution: upgrade to the fixed version with the command below.

composer require modx/revolution:^2.7.0

Details

MODX Revolution version <=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appears to have been fixed in commit 06bc94257408f6a575de20ddb955aca505ef6e68.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/modx/revolution

Introduced in: 0Fixed in: 2.7.0

Fixcomposer require modx/revolution:^2.7.0

References

https://nvd.nist.gov/vuln/detail/CVE-2018-1000207[ADVISORY]
https://github.com/modxcms/revolution/pull/13979[WEB]
https://github.com/modxcms/revolution/commit/06bc94257408f6a575de20ddb955aca505ef6e68[WEB]
https://github.com/a2u/CVE-2018-1000207[WEB]
https://github.com/modxcms/revolution[PACKAGE]
https://rudnkh.me/posts/critical-vulnerability-in-modx-revolution-2-6-4[WEB]