CVE-2018-20405

BigTree 4.3 allows full path disclosure via authenticated admin/news/ input that triggers a syntax error. NOTE: This has been disputed with the following reasoning: "The issue reported requires full developer level access to the content management system where cross site scripting is not an issue -- you already have full control of the CMS including running arbitrary PHP.

CVSS v3 2.7 LOW
CVSS v2.0 4.0 MEDIUM

2.7^/10

CVSS v3 : LOW

Vector : AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Exploitability : 1.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://github.com/bigtreecms/BigTree-CMS/issues/354	Exploit Issue Tracking Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:bigtreecms:bigtree:4.3:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-12-23 23:29

Updated : 2024-07-23 20:15

NVD link : CVE-2018-20405

Mitre link : CVE-2018-20405

CVE.ORG link : CVE-2018-20405

JSON object : View

Products Affected

bigtreecms

bigtree

CWE

CWE-639

Authorization Bypass Through User-Controlled Key

{"id": "CVE-2018-20405", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 2.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.2}]}, "published": "2018-12-23T23:29:00.227", "references": [{"url": "https://github.com/bigtreecms/BigTree-CMS/issues/354", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "BigTree 4.3 allows full path disclosure via authenticated admin/news/ input that triggers a syntax error. NOTE: This has been disputed with the following reasoning: \"The issue reported requires full developer level access to the content management system where cross site scripting is not an issue -- you already have full control of the CMS including running arbitrary PHP."}, {"lang": "es", "value": "** EN DISPUTA ** BigTree versi\u00f3n 4.3 permite la revelaci\u00f3n de ruta completa mediante una entrada autenticada en admin/news/ que desencadena un error de sintaxis. NOTA: Esto se ha disputado con el siguiente razonamiento: \"El problema reportado requiere acceso total de nivel de desarrollador al sistema de administraci\u00f3n de contenido donde los cross site scripting no son un problema ya que tiene el control total del CMS, incluida la ejecuci\u00f3n de PHP arbitrario\"."}], "lastModified": "2024-07-23T20:15:03.050", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bigtreecms:bigtree:4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CDCCF9C-6BB8-4233-9CEE-21070ED20EF2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}