UnoPim up to 0.1.4 Profile Image incomplete identification of uploaded file variables

Summaryinfo

A vulnerability marked as problematic has been reported in UnoPim up to 0.1.4. This issue affects some unknown processing of the component Profile Image Handler. This manipulation causes incomplete identification of uploaded file variables. This vulnerability is registered as CVE-2024-52305. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic was found in UnoPim up to 0.1.4. Affected by this vulnerability is an unknown code of the component Profile Image Handler. The manipulation with an unknown input leads to a incomplete identification of uploaded file variables vulnerability. The CWE definition for the vulnerability is CWE-616. The PHP application uses an old method for processing uploaded files by referencing the four global variables that are set for each file (e.g. $varname, $varname_size, $varname_name, $varname_type). These variables could be overwritten by attackers, causing the application to process unauthorized files. The impact remains unknown. The summary by CVE is:

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. A vulnerability exists in the Create User process, allowing the creation of a new admin account with an option to upload a profile image. An attacker can upload a malicious SVG file containing an embedded script. When the profile image is accessed, the embedded script executes, leading to the potential theft of session cookies. This vulnerability is fixed in 0.1.5.

The advisory is shared at github.com. This vulnerability is known as CVE-2024-52305 since 11/06/2024. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1608.002 for this issue.

Upgrading to version 0.1.5 eliminates this vulnerability. Applying the patch 9a0da7a0892c60f58df2351b5a9498dcb4cb8b7a is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• UnoPim

Version

• 0.1.0
• 0.1.1
• 0.1.2
• 0.1.3
• 0.1.4

License

• open-source

Website

• Product: https://github.com/unopim/unopim/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion