Lucene search

[email protected]CVE-2020-24139

HistoryApr 07, 2021 - 4:15 p.m.

CVE-2020-24139

2021-04-0716:15:13

CWE-918

[email protected]

web.nvd.nist.gov

cve-2020-24139

server-side request forgery

wcms 0.3.2

vulnerable web application

open ports

local network hosts

command execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.3%

JSON

Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application via the path parameter to wex/cssjs.php. It can help identify open ports, local network hosts and execute command on local services.

Affected configurations

NVD

Node

wcmswcmsMatch0.3.2

CPENameOperatorVersion
wcms:wcmswcmseq0.3.2

CPE	Name	Operator	Version
wcms:wcms	wcms	eq	0.3.2

References

github.com/secwx/research/blob/main/cve/CVE-2020-24139.md

github.com/vedees/wcms/issues/8

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.3%

JSON

Related for CVE-2020-24139

osv1 cvelist1 nvd1 prion1