Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo

Vulnerability

CVE-2024-4825 is an arbitrary file upload vulnerability found in Agentejo Cockpit CMS version 0.5.5. The flaw exists in the /media/api parameter, which accepts file uploads via POST requests without proper validation of file type or content [1]. This allows an attacker to upload any file, including executable scripts.

Attack

Vector No authentication or special privileges are required to exploit this vulnerability. An attacker can send a straightforward POST request to the /media/api endpoint from any network-accessible location. The vulnerability is classified with a CVSS v3.1 base score of 9.8 (Critical) [3], indicating high exploitability and minimal required access.

Impact

Successful exploitation enables an attacker to upload malicious files such as web shells or backdoors. This can lead to arbitrary code execution on the server, data exfiltration, and full compromise of the affected infrastructure. The integrity, confidentiality, and availability of the system are all at risk [1][3].

Mitigation

The vulnerability is addressed in Cockpit CMS version 2.7.0 [3]. Users of version 0.5.5 should update immediately to this or a later release. As of the publication date, no workarounds have been identified, and upgrading is the recommended and only solution.