Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS04cHA2LTh4NHEtYzVteM026Q

Server side request forgery in C1 CMS

C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist.

Permalink: https://github.com/advisories/GHSA-8pp6-8x4q-c5mx
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04cHA2LTh4NHEtYzVteM026Q
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 2 years ago
Updated: almost 2 years ago

CVSS Score: 7.6
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

EPSS Percentage: 0.00067
EPSS Percentile: 0.30562

Identifiers: GHSA-8pp6-8x4q-c5mx, CVE-2022-24789
References:

• https://github.com/Orckestra/C1-CMS-Foundation/security/advisories/GHSA-j9c2-gr6m-pp45
• https://nvd.nist.gov/vuln/detail/CVE-2022-24789
• https://github.com/Orckestra/C1-CMS-Foundation/releases/tag/v6.12
• https://github.com/advisories/GHSA-8pp6-8x4q-c5mx

Repository: https://github.com/Orckestra/C1-CMS-Foundation
Blast Radius: 1.0

Affected Packages