CVE-2018-11196 File upload in n/a
Attackers can bypass ClamAV virus scanning on Leap2A archives to distribute malicious files to users via the Mahara ePortfolio platform.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-11196?
CVE-2018-11196 is a high-severity vulnerability in Mahara Mahara, published on 1 Jun 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 can be used as medium to transmit viruses by placing infected files into a Leap2A archive and uploading that to Mahara. In contrast to other ZIP files that are uploaded, ClamAV (when activated) does not check Leap2A archives for viruses, allowing malicious files to be available for download. While files cannot be executed on Mahara itself, Mahara can be used to transfer such files to user computers.
Weakness: CWE-434
Which versions are affected by CVE-2018-11196?
It affects 1 product.
Products include Mahara Mahara.
How do I fix CVE-2018-11196?
No fix has been published for CVE-2018-11196 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-11196 being exploited?
There is no known exploitation of CVE-2018-11196 in the wild and no public exploit code.
Other vulnerabilities in Mahara Mahara
Sources
Also known as GHSA-m3f2-w7gg-4r2w.