CVE-2015-7773: Medium severity getkirby vulnerability
Published Nov 20, 2015
·Updated
Unrestricted file upload vulnerability in the Panel component in Bastian Allgeier Kirby before 2.1.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file that lacks an extension, and then renaming this file to have a .php extension.
Affected Software
1 affected component
Bastian Allgeier Kirby<=2.1.1
Remediation
Patch Available
Event History
Nov 20, 2015
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-7773?
CVE-2015-7773 is considered a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2015-7773?
To fix CVE-2015-7773, upgrade Kirby to version 2.1.2 or later.
3
Who is affected by CVE-2015-7773?
CVE-2015-7773 affects authenticated users of Kirby versions prior to 2.1.2.
4
What type of vulnerability is CVE-2015-7773?
CVE-2015-7773 is an unrestricted file upload vulnerability.
5
Can CVE-2015-7773 lead to a data breach?
Yes, CVE-2015-7773 can potentially lead to a data breach by allowing attackers to execute arbitrary PHP code.