CVE-2024-11680

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-11680
ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit this flaw by sending crafted HTTP requests to options.php, enabling unauthorized modification of the application's configuration. Successful exploitation allows attackers to create accounts, upload webshells, and embed malicious JavaScript.

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/projectsend-auth-bypass.yaml Third Party Advisory
https://github.com/projectsend/projectsend/commit/193367d937b1a59ed5b68dd4e60bd53317473744 Patch
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/projectsend_unauth_rce.rb Exploit
https://vulncheck.com/advisories/projectsend-bypass Third Party Advisory
https://www.synacktiv.com/sites/default/files/2024-07/synacktiv-projectsend-multiple-vulnerabilities.pdf Mitigation Technical Description Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:projectsend:projectsend:*:*:*:*:*:*:*:*
History

06 Dec 2024, 18:42

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
CWE CWE-863
First Time Projectsend
Projectsend projectsend
References () https://vulncheck.com/advisories/projectsend-bypass - () https://vulncheck.com/advisories/projectsend-bypass - Third Party Advisory
References () https://github.com/projectsend/projectsend/commit/193367d937b1a59ed5b68dd4e60bd53317473744 - () https://github.com/projectsend/projectsend/commit/193367d937b1a59ed5b68dd4e60bd53317473744 - Patch
References () https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/projectsend-auth-bypass.yaml - () https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/projectsend-auth-bypass.yaml - Third Party Advisory
References () https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/projectsend_unauth_rce.rb - () https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/projectsend_unauth_rce.rb - Exploit
References () https://www.synacktiv.com/sites/default/files/2024-07/synacktiv-projectsend-multiple-vulnerabilities.pdf - () https://www.synacktiv.com/sites/default/files/2024-07/synacktiv-projectsend-multiple-vulnerabilities.pdf - Mitigation, Technical Description, Third Party Advisory
CPE cpe:2.3:a:projectsend:projectsend:*:*:*:*:*:*:*:*

26 Nov 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-26 10:15

Updated : 2024-12-06 18:42

NVD link : CVE-2024-11680

Mitre link : CVE-2024-11680

JSON object : View

Products Affected

projectsend

  • projectsend
CWE
CWE-863

Incorrect Authorization