CSRF-to-RCE-on-Backdrop-CMS

De CSRF a RCE en Backdrop CMS 1.20 Este PoC describe cómo explotar CSRF en Backdrop CMS versión 1.20 con escalada a RCE. CVE ID CVE-2021-45268 Descripción La versión 1.20 de Backdrop CMS permite añadir plugins mediante archivos ZIP subidos al sitio. Y, debido a que no tiene protección anti-CSRF, ...

CVE-2021-45268

A Cross Site Request Forgery CSRF vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution RCE on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file. NOTE: the vendor disputes this because the attack requires a session cook...

CVE-2021-45268

CVE-2021-45268 concerns Backdrop CMS 1.20 with a CSRF vulnerability that can lead to remote code execution on the hosting server by uploading a crafted PHP add-on. The vendor notes the attack requires a high-privileged authenticated user with permission to install add-ons. Multiple sources (NVD, ...

CVE-2021-45268

A Cross Site Request Forgery CSRF vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution RCE on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file. NOTE: the vendor disputes this because the attack requires a session cook...