CVE-2022-30117
Last modified
CVE-2022-30117 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload which could result in an Arbitrary File Delete exploit. This was remediated by sanitizing /index.php/ccm/system/file/upload to ensure Concrete doesn’t allow traversal and by changing isFullChunkFilePresent to have an early false return when input doesn't match expectations.Concrete CMS Security team ranked this 5.8 with CVSS v3.1 vector AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H. EPSS estimates a 2.02% chance of exploitation in the next 30 days.
Description
Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload which could result in an Arbitrary File Delete exploit. This was remediated by sanitizing /index.php/ccm/system/file/upload to ensure Concrete doesn’t allow traversal and by changing isFullChunkFilePresent to have an early false return when input doesn't match expectations.Concrete CMS Security team ranked this 5.8 with CVSS v3.1 vector AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H. Credit to Siebene for reporting.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Concretecms | Concrete Cms | < 8.5.8 |
| Concretecms | Concrete Cms | >= 9.0.0, < 9.1.0 |
References
- https://documentation.concretecms.org/developers/introduction/version-history/858-release-notesRelease Notes, Vendor Advisory
- https://documentation.concretecms.org/developers/introduction/version-history/910-release-notesRelease Notes, Vendor Advisory
- https://hackerone.com/reports/1482280Permissions Required, Third Party Advisory
- https://documentation.concretecms.org/developers/introduction/version-history/858-release-notesRelease Notes, Vendor Advisory
- https://documentation.concretecms.org/developers/introduction/version-history/910-release-notesRelease Notes, Vendor Advisory
- https://hackerone.com/reports/1482280Permissions Required, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-30117?
How severe is CVE-2022-30117?
How do I fix CVE-2022-30117?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-30105In Belkin N300 Firmware 1.00.08, the script located at /sett…9.8
- CVE-2022-30110The file preview functionality in Jirafeau < 4.4.0, which is…6.1
- CVE-2022-30111Due to the use of an insecure algorithm for rolling codes in…6.8
- CVE-2022-30113Electronic mall system 1.0_build20200203 is affected vulnera…9.8
- CVE-2022-30114A heap-based buffer overflow in a network service in Fastweb…7.5
- CVE-2022-30115Using its HSTS support, curl can be instructed to use HTTPS …4.3
- CVE-2022-30118Title for CVE: XSS in /dashboard/system/express/entities/for…6.1
- CVE-2022-30119XSS in /dashboard/reports/logs/view - old browsers only. Whe…6.1
- CVE-2022-3012A vulnerability was found in oretnom23 Fast Food Ordering Sy…8.8
- CVE-2022-30120XSS in /dashboard/blocks/stacks/view_details/ - old browsers…6.1
- CVE-2022-30121The “LANDesk(R) Management Agent” service exposes a socket a…6.7
- CVE-2022-30122A possible denial of service vulnerability exists in Rack <2…7.5
Are you affected by CVE-2022-30117?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST