CVE-2021-25971 Camaleon CMS - SVG File Upload Creates DoS for Media Upload Feature
An attacker with low privileges can cause a permanent denial of service in the media upload feature by uploading a specially crafted SVG file.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-25971?
CVE-2021-25971 is a medium-severity denial of service vulnerability in camaleon_cms, published on 20 Oct 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In Camaleon CMS, versions 2.0.1 to 2.6.0 are vulnerable to an Uncaught Exception. The app's media upload feature crashes permanently when an attacker with a low privileged access uploads a specially crafted .svg file
Which versions are affected by CVE-2021-25971?
2 open source packages ship an affected version, including camaleon_cms. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
camaleon_cms RubyGems | From 2.0.1 | 2.6.0.1 |
camaleon_cms RubyGems | From 2.0.1 | 2.6.0.1 |
Products include Tuzitio Camaleon Cms.
How do I fix CVE-2021-25971?
Upgrade camaleon_cms to 2.6.0.1 or later.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-25971 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-25971 exists.
Other vulnerabilities in camaleon_cms
- CVE-2024-46986 Arbitrary file write leading to RCE in Camaleon CMS
- CVE-2023-30145 Server-Side Template Injection in Camaleon CMS
- CVE-2021-25970 Camaleon CMS - Insufficient Session Expiration after Password Change
- CVE-2024-46987 Arbitrary path traversal in Camaleon CMS
- CVE-2021-25969 Camaleon CMS - Stored Cross-Site Scripting (XSS) in Comments
Sources
Also known as GHSA-r2w2-h6r8-3r53.