CVE-2017-1000125 File upload in n/a

What is CVE-2017-1000125?

CVE-2017-1000125 is a high-severity vulnerability in n/a, published on 17 Nov 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell.

Weakness: CWE-732

Which versions are affected by CVE-2017-1000125?

It affects 1 product.

Products include Codiad Codiad.

How do I fix CVE-2017-1000125?

No fix has been published for CVE-2017-1000125 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-1000125 being exploited?

There is no known exploitation of CVE-2017-1000125 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2019-19208 Code injection in codiad Critical 9.8
• CVE-2018-14009 Codiad remote code execution vulnerability Critical 9.8
• CVE-2017-11366 Codiad Vulnerable to Shell Command Injection Critical 9.8
• CVE-2020-14043 Codiad CSRF Vulnerability High 8.8
• CVE-2020-23355 Codiad Vulnerable to PHP Magic Hash Vulnerability High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-hjgm-hqw5-jg63.