Lucene search

MitreCVE-2019-19374

HistoryDec 11, 2019 - 8:15 p.m.

CVE-2019-19374

2019-12-1120:15:10

CWE-22

mitre

web.nvd.nist.gov

squiz matrix cms

file upload

arbitrary file deletion

information disclosure

cve-2019-19374

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

8.5

Confidence

High

EPSS

0.015

Percentile

86.8%

JSON

An issue was discovered in core/assets/form/form_question_types/form_question_type_file_upload/form_question_type_file_upload.inc in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where a user can delete arbitrary files from the server during interaction with the File Upload field type, when a custom form exists. (This is related to an information disclosure issue within the File Upload field type that allows users to view the full path to uploaded files, including the product’s web root directory.)

Affected configurations

Nvd

Node

squizmatrixRange5.5.0.0–5.5.0.3

squizmatrixRange5.5.1.0–5.5.1.8

squizmatrixRange5.5.2.0–5.5.2.4

squizmatrixRange5.5.3.0–5.5.3.3

VendorProductVersionCPE
squizmatrix*cpe:2.3:a:squiz:matrix:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
squiz	matrix	*	cpe:2.3:a:squiz:matrix::::::::

References

packetstormsecurity.com/files/155671/Squiz-Matrix-CMS-5.5.x.x-Code-Execution-Information-Disclosure.html

seclists.org/fulldisclosure/2019/Dec/34

matrix.squiz.net/releases/5.5/5.5.3.3

zxsecurity.co.nz/wp-content/uploads/2019/12/ZX%20Security%20Advisory%20-%20Squiz%20Matrix%20CMS%20-%20Multiple%20Vulnerabilities.pdf

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

8.5

Confidence

High

EPSS

0.015

Percentile

86.8%

JSON

Related for CVE-2019-19374