Description (CNA)
HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport() where an uploaded ZIP archive is extracted directly into the public web root before any validation of file names, extensions, or content is performed. An authenticated administrator can upload a crafted theme archive containing a PHP file and an .htaccess file to re-enable execution, then request it under the themes directory to execute arbitrary OS commands as the web-server user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| danielbrendel / hortusfox-web | affected 0 before 6.2 |
CWE
CWE-434
References
- https://github.com/danielbrendel/hortusfox-web/releases/tag/v6.2
- https://github.com/danielbrendel/hortusfox-web/commit/3b87393d38ce408ec6f0946ffb3cbf0d08b5f07c
- https://www.vulncheck.com/advisories/hortusfox-remote-code-execution-via-theme-import
ADP enrichment
No English description supplied.
No references supplied.