CVE-2018-7486 Code injection in n/a
Remote attackers can execute arbitrary code via path traversal in the [m] tag, requiring file upload capability.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-7486?
CVE-2018-7486 is a high-severity code injection vulnerability in n/a, published on 26 Feb 2018. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Blue River Mura CMS before v7.0.7029 supports inline function calls with an [m] tag and [/m] end tag, without proper restrictions on file types or pathnames, which allows remote attackers to execute arbitrary code via an [m]$.dspinclude("../pathname/executable.jpeg")[/m] approach, where executable.jpeg contains ColdFusion Markup Language code. This can be exploited in conjunction with a CKFinder feature that allows file upload.
Weakness: CWE-22
Which versions are affected by CVE-2018-7486?
It affects 1 product.
Products include Blueriver Muracms.
How do I fix CVE-2018-7486?
No fix has been published for CVE-2018-7486 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2018-7486 being exploited?
There is no known exploitation of CVE-2018-7486 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-pcgv-6rcf-4897.