CVE-2015-0258 File upload in Collabtive
Authenticated attackers can execute arbitrary code by uploading files with specific PHP extensions due to incomplete blacklist validation in Collabtive.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-0258?
CVE-2015-0258 is a high-severity vulnerability in Canonical Ubuntu Linux, published on 17 Feb 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.
Weakness: CWE-434
Which versions are affected by CVE-2015-0258?
It affects 3 products.
Products include Canonical Ubuntu Linux, Debian Debian Linux, O-Dyn Collabtive.
How do I fix CVE-2015-0258?
Upgrade to a fixed version.
Is CVE-2015-0258 being exploited?
There is no known exploitation of CVE-2015-0258 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as DLA-2125-1, GHSA-2hf9-vh2r-j6vp, UBUNTU-CVE-2015-0258, USN-4590-1.