CVE-2020-10212 Server-side request forgery in n/a
An attacker can exploit Server-Side Request Forgery in Responsive FileManager to access internal resources or bypass security controls via the upload URL parameter.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-10212?
CVE-2020-10212 is a critical server-side request forgery vulnerability in n/a, published on 6 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possible for a DNS hostname to resolve to an internal IP address. For example, an SSRF attempt may succeed if a .ico filename is added to the PATH_INFO. Also, an attacker could create a DNS hostname that resolves to the 0.0.0.0 IP address for DNS pinning. NOTE: this issue exists because of an incomplete fix for CVE-2018-14728.
Weakness: CWE-918
Which versions are affected by CVE-2020-10212?
It affects 1 product.
Products include Tecrail Responsive Filemanager.
How do I fix CVE-2020-10212?
No fix has been published for CVE-2020-10212 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2020-10212 being exploited?
There is no known exploitation of CVE-2020-10212 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-66f3-j5p3-p6pc.