Backdrop CMS up to 1.13.4/1.14.1 File Upload information disclosure

Summaryinfo

A vulnerability identified as critical has been detected in Backdrop CMS up to 1.13.4/1.14.1. This impacts an unknown function of the component File Upload. This manipulation causes information disclosure. This vulnerability is handled as CVE-2019-19902. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability has been found in Backdrop CMS up to 1.13.4/1.14.1 (Content Management System) and classified as critical. Affected by this vulnerability is some unknown functionality of the component File Upload. The manipulation with an unknown input leads to a information disclosure vulnerability. The CWE definition for the vulnerability is CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It allows the upload of entire-site configuration archives through the user interface or command line. It does not sufficiently check uploaded archives for invalid data, allowing non-configuration scripts to potentially be uploaded to the server. This issue is mitigated by the fact that the attacker would be required to have the "Synchronize, import, and export configuration" permission, a permission that only trusted administrators should be given. Other measures in the product prevent the execution of PHP scripts, so another server-side scripting language must be accessible on the server to execute code.

The weakness was released 12/19/2019. This vulnerability is known as CVE-2019-19902 since 12/19/2019. The attack can be launched remotely. A single authentication is required for exploitation. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1592 for this issue.

Upgrading to version 1.13.5 or 1.14.2 eliminates this vulnerability.

Entries connected to this vulnerability are available at VDB-147542, VDB-147540 and VDB-147539. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Content Management System

Vendor

• Backdrop

Name

• CMS

Version

• 1.13.0
• 1.13.1
• 1.13.2
• 1.13.3
• 1.13.4
• 1.14.0
• 1.14.1

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion