CVE-2022-23043 File upload restriction bypass in Zenario CMS

What is CVE-2022-23043?

CVE-2022-23043 is a high-severity vulnerability in Zenario CMS, published on 22 Feb 2022. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Types' using the '.phar' extension. Then an attacker can upload a malicious file, intercept the request and change the extension to '.phar' in order to run commands on the server.

Weakness: CWE-434

Which versions are affected by CVE-2022-23043?

2 open source packages ship an affected version, including tribalsystems/zenario. It affects 1 product.

Products include Tribalsystems Zenario.

How do I fix CVE-2022-23043?

Upgrade tribalsystems/zenario to 9.2.55826 or later.

Is CVE-2022-23043 being exploited?

There is no known exploitation of CVE-2022-23043 in the wild and no public exploit code.

Other vulnerabilities in Zenario CMS

• CVE-2022-44136 Zenario CMS is vulnerable to Remote Code Execution (RCE). Critical 9.8
• CVE-2021-26830 SQL Injection in tribalsystems/zenario Critical 9.1
• CVE-2018-18420 Zenario CMS vulnerable to CSRF High 8.8
• CVE-2018-5960 SQL Injection in Zenario 7.1-7.6 High 8.8
• CVE-2021-42171 Unrestricted Upload of File with Dangerous Type in Zenario CMS High 7.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6r86-2jm9-9mh4.