CVE-2017-14399: Malicious File Upload
In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajaxrename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14399?
CVE-2017-14399 is classified as a high severity vulnerability due to the potential for unrestricted file uploads, which can lead to remote code execution.
How do I fix CVE-2017-14399?
To fix CVE-2017-14399, update BlackCat CMS to the latest version that addresses this vulnerability and restrict file uploads to allowed file types.
What type of vulnerability is CVE-2017-14399?
CVE-2017-14399 is an unrestricted file upload vulnerability, allowing attackers to upload malicious files.
Which software is affected by CVE-2017-14399?
CVE-2017-14399 specifically affects BlackCat CMS version 1.2.2.
Can CVE-2017-14399 lead to a security breach?
Yes, exploiting CVE-2017-14399 can lead to a security breach by allowing the execution of arbitrary code on the server.