CVE-2021-28931 Arbitrary file upload in Fork CMS
Attackers can upload malicious zip files to the Themes panel to create or replace arbitrary files, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-28931?
CVE-2021-28931 is a high-severity vulnerability in n/a, published on 7 Jul 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file uploaded to the Themes panel.
Weakness: CWE-434
Which versions are affected by CVE-2021-28931?
2 open source packages ship an affected version, including forkcms/forkcms. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
forkcms/forkcms Packagist | All versions | 5.9.3 |
forkcms/forkcms Packagist | All versions | 5.9.3 |
Products include Fork-Cms Fork Cms.
How do I fix CVE-2021-28931?
Upgrade forkcms/forkcms to 5.9.3 or later.
Is CVE-2021-28931 being exploited?
There is no known exploitation of CVE-2021-28931 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2019-15521 Spoon Library as used in Fork CMS allows PHP object injection
- CVE-2022-0153 SQL Injection in forkcms/forkcms
- CVE-2022-1064 SQL injection through marking blog comments on bulk as spam in forkcms/forkcms
- CVE-2020-23264 Cross-Site Request Forgery in forkcms
- CVE-2020-24036 Deserialization in n/a
Sources
Also known as GHSA-748f-wv76-x9hg.