Pkp Open Journal Systems up to 2.3.5 incomplete blacklist

Summaryinfo

A vulnerability categorized as critical has been discovered in Pkp Open Journal Systems up to 2.3.5. The affected element is an unknown function. The manipulation results in incomplete blacklist. This vulnerability is reported as CVE-2012-1468. Moreover, an exploit is present. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in Pkp Open Journal Systems up to 2.3.5. Affected is an unknown functionality. The manipulation with an unknown input leads to a incomplete blacklist vulnerability. CWE is classifying the issue as CWE-184. The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete, leading to resultant weaknesses. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Author Role permission to execute arbitrary code by uploading a file with an executable extension that is not ".php", then accessing it via a direct request to the file in submission/original/ in the associated article directory, as demonstrated using .pHp, .asp, and other extensions.

The weakness was disclosed 09/06/2012 (Website). The advisory is shared for download at htbridge.com. This vulnerability is traded as CVE-2012-1468 since 02/29/2012. It is possible to launch the attack remotely. The successful exploitation needs a authentication. Technical details are unknown but a public exploit is available. The MITRE ATT&CK project declares the attack technique as T1562.006.

The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept.

Upgrading to version 2.3.6 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Exploit-DB (37001). The entries VDB-62113 and VDB-62111 are pretty similar. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Pkp

Name

• Open Journal Systems

Version

• 2.3.0
• 2.3.1
• 2.3.2
• 2.3.3
• 2.3.4
• 2.3.5

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion