CVE-2018-9921: Path Traversal
In CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible to determine the existence of files and directories outside the web-site installation directory, and determine whether a file has contents matching a specified checksum. The attack uses an admin/checksum.php?c= request.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable or restrict access to admin/checksum.php (or specifically block requests that use the __c= parameter) to prevent the checksum-based file/directory enumeration outside the installation directory.
CMS Made Simple Admin/checksum.php access = disabled/blocked - Compensating control
Mitigate the Directory Traversal exposure by blocking access to the endpoint used in the attack: admin/checksum.php with the __c= request parameter (e.g., deny requests to admin/checksum.php that include __c=).
Event History
Frequently Asked Questions
What is the severity of CVE-2018-9921?
CVE-2018-9921 has a medium severity rating due to its potential for exposing sensitive information.
How do I fix CVE-2018-9921?
To fix CVE-2018-9921, upgrade CMS Made Simple to version 2.2.8 or later, which addresses this vulnerability.
What types of attacks are possible due to CVE-2018-9921?
CVE-2018-9921 allows attackers to perform a Directory Traversal attack, potentially exposing files outside the intended directory.
Is CVE-2018-9921 present in other versions of CMS Made Simple?
CVE-2018-9921 specifically affects CMS Made Simple version 2.2.7; other versions may or may not be affected.
What conditions are needed for CVE-2018-9921 to be exploited?
CVE-2018-9921 can be exploited by sending crafted requests to the admin/checksum.php endpoint.