CVE-2019-14771

Severity Score

9.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 allows the upload of entire-site configuration archives through the user interface or command line. It does not sufficiently check uploaded archives for invalid data, potentially allowing non-configuration scripts to be uploaded to the server. (This attack is mitigated by the attacker needing the "Synchronize, import, and export configuration" permission, a permission that only trusted administrators should be given. Other preventative measures in Backdrop CMS prevent the execution of PHP scripts, so another server-side scripting language must be accessible on the server to execute code.) Note: This has been disputed by multiple 3rd parties due to advanced permissions that are needed to exploit.

CMS de Backdrop versiones 1.12.x anteriores a 1.12.8 y versiones 1.13.x anteriores a 1.13.3, permite cargar archivos de configuración de todo el sitio por medio de la interfaz de usuario o la línea de comandos. No comprueba suficientemente los archivos cargados en busca de datos no válidos, lo que potencialmente permite que los scripts que no sean de configuración sean cargados en el servidor. (Este ataque es mitigado por el atacante necesitando el permiso "Synchronize, import, and export configuration", que solo deben ser otorgados a administradores confiables. Otras medidas preventivas en CMS de Backdrop impiden la ejecución de scripts de PHP, entonces otro lenguaje de script del lado del servidor debe estar accesible en el servidor para ejecutar el código).

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2019-08-07 CVE Reserved
2019-08-08 CVE Published
2023-11-02 EPSS Updated
2024-08-05 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://backdropcms.org/security/backdrop-sa-core-2019-012	2024-05-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Backdropcms Search vendor "Backdropcms"		Backdrop Cms Search vendor "Backdropcms" for product "Backdrop Cms"				>= 1.12.0 < 1.12.8 Search vendor "Backdropcms" for product "Backdrop Cms" and version " >= 1.12.0 < 1.12.8"		-		Affected
Backdropcms Search vendor "Backdropcms"		Backdrop Cms Search vendor "Backdropcms" for product "Backdrop Cms"				>= 1.13.0 < 1.13.3 Search vendor "Backdropcms" for product "Backdrop Cms" and version " >= 1.13.0 < 1.13.3"		-		Affected