Is CVE-2017-5520 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2017-5520 being exploited in the wild.

How severe is CVE-2017-5520?

High severity, with a CVSS score of 8.8, published 17 January 2017.

Which products and versions are affected?

GeniXCMS GeniXCMS through 0.0.8.

Is there a fix for CVE-2017-5520?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2017-5520 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2017-5520?

Check whether you run Metalgenix Genixcms. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2017-5520: GeniXCMS unrestricted file upload in media rename feature

CVE-2017-5520 · Severity: high · CVSS 8.8 · Published 2017-01-17

GeniXCMS, a content management system used for building websites, contains a security flaw in its media management component. An attacker with basic user permissions can bypass security filters to upload and execute malicious scripts on the server. This could lead to a complete takeover of the website, theft of sensitive data, or disruption of services.

Technologies: Metalgenix Genixcms. Vendors: Metalgenix.

Quick answers

Is CVE-2017-5520 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2017-5520 being exploited in the wild.
How severe is CVE-2017-5520?: High severity, with a CVSS score of 8.8, published 17 January 2017.
Which products and versions are affected?: GeniXCMS GeniXCMS through 0.0.8.
Is there a fix for CVE-2017-5520?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2017-5520 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2017-5520?: Check whether you run Metalgenix Genixcms. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An unrestricted file upload vulnerability exists in GeniXCMS through version 0.0.8 due to insufficient blacklisting of PHP file extensions in the media rename feature. While the system may block standard .php files, it fails to validate alternative extensions such as .php6, .php7, and .phtml. A remote attacker with low-level authenticated access can rename uploaded files to these executable extensions, leading to remote code execution (RCE) on the underlying web server. The vulnerability is tracked as CWE-434 and was addressed in subsequent patches on GitHub.

Affected products

GeniXCMS GeniXCMS through 0.0.8

Timeline

2017-01-17: disclosed
2017-01-17: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.