CVE-2022-24977 Path Traversal in ImpressCMS

What is CVE-2022-24977?

CVE-2022-24977 is a critical path traversal vulnerability in n/a, published on 13 Feb 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to unsafe interaction with the CKEditor processImage.php script. The payload may be placed in PHP_SESSION_UPLOAD_PROGRESS when the PHP installation supports upload_progress.

Weakness: CWE-22

Which versions are affected by CVE-2022-24977?

2 open source packages ship an affected version, including impresscms/impresscms. It affects 1 product.

Products include Impresscms Impresscms.

How do I fix CVE-2022-24977?

Upgrade impresscms/impresscms to 1.4.2 or later.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2022-24977 being exploited?

There is no known exploitation of CVE-2022-24977 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2008-3453 Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin.php and "a few files Critical 10.0
• CVE-2021-26599 SQL Injection in ImpressCMS Critical 9.8
• CVE-2021-26600 Type Confusion in ImpressCMS Critical 9.8
• CVE-2022-50912 ImpressCMS 1.4.4 - Unrestricted File Upload Critical 9.3
• CVE-2021-26601 Path Traversal in ImpressCMS High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-389p-fchr-q2mg.