CVE-2024-11680

🗓️ 26 Nov 2024 09:55:23Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 248 Views🌐 WEB

ProjectSend versions prior to r1720 have improper authentication allowing remote, unauthenticated attackers to modify application configuration and perform unauthorized actions

Reporter	Title	Published	Views	Family All 23
GithubExploit	Exploit for Missing Authentication for Critical Function in Projectsend	31 Mar 202612:10	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Projectsend	4 Dec 202418:42	–	githubexploit
ATTACKERKB	CVE-2024-11680	26 Nov 202400:00	–	attackerkb
Circl	CVE-2024-11680	21 Nov 202417:59	–	circl
CISA KEV Catalog	ProjectSend Improper Authentication Vulnerability	3 Dec 202400:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	3 Dec 202412:00	–	cisa
CNNVD	ProjectSend 安全漏洞	26 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-11680 ProjectSend Unauthenticated Configuration Modification	26 Nov 202409:55	–	cvelist
Metasploit	ProjectSend r1295 - r1605 Unauthenticated Remote Code Execution	21 Nov 202418:54	–	metasploit
Nuclei	ProjectSend <= r1605 - Improper Authorization	6 Jun 202603:01	–	nuclei

NVD

Vulners

Vulnrichment

CNA

Node

projectsend projectsendRange<r1720

[
  {
    "defaultStatus": "unaffected",
    "product": "ProjectSend",
    "programFiles": [
      "options.php"
    ],
    "repo": "https://github.com/projectsend/projectsend",
    "vendor": "ProjectSend",
    "versions": [
      {
        "lessThan": "r1720",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/projectsend/projectsend/commit/193367d937b1a59ed5b68dd4e60bd53317473744
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/projectsend_unauth_rce.rb
vulncheck	www.vulncheck.com/advisories/projectsend-bypass
synacktiv	www.synacktiv.com/sites/default/files/2024-07/synacktiv-projectsend-multiple-vulnerabilities.pdf
github	www.github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/projectsend-auth-bypass.yaml
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
csrf_token	path	options.php	Access control misconfiguration allows enabling registration and file upload capabilities via options.php.	CWE-306
section	path	options.php	Access control misconfiguration allows enabling registration and file upload capabilities via options.php.	CWE-306
clients_can_register	path	options.php	Access control misconfiguration allows enabling registration and file upload capabilities via options.php.	CWE-306
clients_auto_approve	path	options.php	Access control misconfiguration allows enabling registration and file upload capabilities via options.php.	CWE-306
clients_can_upload	path	options.php	Access control misconfiguration allows enabling registration and file upload capabilities via options.php.	CWE-306
clients_can_delete_own_files	path	options.php	Access control misconfiguration allows enabling registration and file upload capabilities via options.php.	CWE-306
clients_auto_group	path	options.php	Access control misconfiguration allows enabling registration and file upload capabilities via options.php.	CWE-306
clients_can_select_group	path	options.php	Access control misconfiguration allows enabling registration and file upload capabilities via options.php.	CWE-306
expired_files_hide	path	options.php	Access control misconfiguration allows enabling registration and file upload capabilities via options.php.	CWE-306
csrf_token	path	register.php	Unauthenticated user creation by leveraging the registration flow to provision accounts.	CWE-306