CVE-2023-25828: Authenticate Remote Code Execution in Pluck CMS
First published: Mon Mar 27 2023(Updated: )
Pluck CMS is vulnerable to an authenticated remote code execution (RCE) vulnerability through its “albums” module. Albums are used to create collections of images that can be inserted into web pages across the site. Albums allow the upload of various filetypes, which undergo a normalization process before being available on the site. Due to lack of file extension validation, it is possible to upload a crafted JPEG payload containing an embedded PHP web-shell. An attacker may navigate to it directly to achieve RCE on the underlying web server. Administrator credentials for the Pluck CMS web interface are required to access the albums module feature, and are thus required to exploit this vulnerability. CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C (8.2 High)
Credit: disclosure@synopsys.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pluck CMS | <4.7.16 | |
| Pluck CMS | =4.7.16-dev1 | |
| Pluck CMS | =4.7.16-dev2 | |
| Pluck CMS | =4.7.16-dev3 | |
| Pluck CMS | =4.7.16-dev4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-25828?
CVE-2023-25828 is an authenticated remote code execution (RCE) vulnerability in Pluck CMS through its "albums" module.
How does CVE-2023-25828 affect Pluck CMS?
CVE-2023-25828 affects Pluck CMS versions up to and including 4.7.16-dev4.
How severe is CVE-2023-25828?
CVE-2023-25828 has a severity score of 7.2, indicating a high severity level.
What is the CWE classification of CVE-2023-25828?
CVE-2023-25828 is classified as CWE-434, which is an Unrestricted Upload of File with Dangerous Type vulnerability.
How can I fix CVE-2023-25828?
To fix CVE-2023-25828, users should update Pluck CMS to a version that is higher than 4.7.16-dev4.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/title
- agent/remedy
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/pluck-cms
- canonical/pluck cms
- version/pluck cms/4.7.16-dev1
- version/pluck cms/4.7.16-dev2
- version/pluck cms/4.7.16-dev3
- version/pluck cms/4.7.16-dev4