A vulnerability was found in Baidu UEditor 1.4.3.3. It has been classified as problematic. This affects an unknown part of the file /ueditor/php/controller.php?action=uploadfile&encode=utf-8. The manipulation of the argument upfile leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273273 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.273273 | Permissions Required Third Party Advisory |
| https://vuldb.com/?ctiid.273273 | Permissions Required Third Party Advisory |
| https://vuldb.com/?submit.380092 | Third Party Advisory |
| https://github.com/Hebing123/cve/issues/62 | Exploit Third Party Advisory |
Configurations
History
15 Aug 2024, 18:40
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:baidu:ueditor:*:*:*:*:*:*:*:* | |
| First Time |
Baidu
Baidu ueditor |
|
| References | () https://vuldb.com/?id.273273 - Permissions Required, Third Party Advisory | |
| References | () https://github.com/Hebing123/cve/issues/62 - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.273273 - Permissions Required, Third Party Advisory | |
| References | () https://vuldb.com/?submit.380092 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
01 Aug 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-01 05:15
Updated : 2024-08-15 18:40
NVD link : CVE-2024-7342
Mitre link : CVE-2024-7342
JSON object : View
Products Affected
baidu
- ueditor
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type