Vulnerability · Published Feb 24, 2022 · Assigned by mitre

CVE-2021-44664

High 8.8

In plain English

A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 12.8% (higher than 96% of all known vulnerabilities).

Severity (CVSS NVD)8.8High

Exploit odds (30 days)12.8%top 3.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupload.php by uploading a maliciously crafted PHP file though the project interface disguised as a language file to bypasses the upload filters. Attackers can manipulate the files destination by abusing path traversal in the 'mediapath' variable.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/thexerteproject/xerteonlinetoolkits/commit/6daeb81d089d4a561e22f931fff1327660a7d1b5 x_refsource_MISC
https://github.com/thexerteproject/xerteonlinetoolkits/commit/1672d6f46bbd6f6d42f0903ce9a313927ae2836b#diff-27433bb0be90e431d40986f9afebe9ee2f8d1025a7f9e55c3cd7a86f1f8e3fdc x_refsource_MISC
https://riklutz.nl/2021/11/03/authenticated-file-upload-to-remote-code-execution-in-xerte/ x_refsource_MISC
http://packetstormsecurity.com/files/166182/Xerte-3.9-Remote-Code-Execution.html x_refsource_MISC