CVE-2018-18830: Malicious File Upload

Published Oct 30, 2018

Updated

An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login status, you can use this interface to upload files without setting a cookie. First, start an upload of JSP code with a .png filename, and then intercept the data packet. In the name parameter, change the suffix to jsp. In the response, the server returns the storage path of the file, which can be accessed to execute arbitrary JSP code.

Affected Software

1 affected component

Mingsoft MCMS=4.6.5

Event History

Oct 30, 2018

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is CVE-2018-18830?

CVE-2018-18830 is a vulnerability in MCMS 4.6.5 that allows unauthorized file uploads.

How severe is CVE-2018-18830?

CVE-2018-18830 is classified as critical with a severity value of 9.8.

How does CVE-2018-18830 affect Mingsoft MCMS?

CVE-2018-18830 affects Mingsoft MCMS version 4.6.5.

How can an attacker exploit CVE-2018-18830?

An attacker can exploit CVE-2018-18830 by uploading unauthorized files without setting a cookie.

Is there a fix for CVE-2018-18830?

There is no known fix for CVE-2018-18830 at this time.