File upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and *.hello files using the Media Files upload functionality. The original file upload vulnerability (CVE-2020-27387) was remediated by restricting the PHP extensions; however, we confirmed that the filter was bypassed via uploading an arbitrary .htaccess and *.hello files in order to execute PHP code to gain RCE.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-04-05T15:37:31
Updated: 2024-08-03T21:40:14.223Z
Reserved: 2021-03-15T00:00:00
Link: CVE-2021-28428
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-04-05T16:15:11.880
Modified: 2022-04-15T20:16:10.470
Link: CVE-2021-28428
Redhat
No data.