CVE-2023-46865 Code injection in n/a
A superadmin can execute arbitrary PHP code by embedding it in a company logo image, requiring immediate patching for Crater web applications.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-46865?
CVE-2023-46865 is a high-severity code injection vulnerability in n/a, published on 30 Oct 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image.
Weakness: CWE-94
Which versions are affected by CVE-2023-46865?
It affects 1 product.
Products include Craterapp Crater.
How do I fix CVE-2023-46865?
No fix has been published for CVE-2023-46865 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2023-46865 being exploited?
There is no known exploitation of CVE-2023-46865 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in n/a
- CVE-2021-4080 Unrestricted Upload of File with Dangerous Type in crater-invoice/crater
- CVE-2022-0372 Cross-site Scripting (XSS) - Stored in crater-invoice/crater
- CVE-2022-0203 Improper Access Control in crater-invoice/crater
- CVE-2022-1032 Insecure deserialization of not validated module file in crater-invoice/crater
- CVE-2022-1033 Unrestricted Upload of File with Dangerous Type in crater-invoice/crater
Sources
Also known as GHSA-5cw4-vrv3-8qx9.