[★]Metasoft MetaCRM6 6.4.0-Unrestricted File Upload Vulnerability
输入“/”快速插入内容
[★]Metasoft MetaCRM6 6.4.0-Unrestricted File Upload Vulnerability
[★]Metasoft MetaCRM6 6.4.0-Unrestricted File Upload Vulnerability
6月3日修改
Company：Beijing Meite Software Technology Co., Ltd.
Product: MetaCRM6
Affected version: 6.4.0 Beta06
Vulnerability Type: CWE-434 (Unrestricted Upload of File with Dangerous Type)
Attack Vector: Network (Remote)
漏洞描述 (Description)：
There is a serious file upload vulnerability in the MTCRM6 system of Beijing Meite Software Technology Co., Ltd. The vulnerability is located in the /common/jsp/upload3.jsp interface. The interface does not restrict the type of uploaded files, and an attacker without authentication can exploit this vulnerability. This allows webshell to be transferred to the server. Successful exploitation of this vulnerability could enable remote code execution, granting the attacker full administrative access to the server.
Impact Score (CVSS v3.1):
◦
Attack Vector (AV): Network (只要能联网就能打)
◦
Attack Complexity (AC): Low (无需特殊条件)
◦
Privileges Required (PR): None (未授权)
◦
User Interaction (UI): None (无需管理员点链接)
◦
Scope (S): Changed
◦
Confidentiality (C): High
◦
Integrity (I): High
◦
Availability (A): High
Vulnerability POC
After investigation, it was confirmed that this vulnerability widely affects the MTCRM6 system. An attacker can easily identify a large number of globally exposed targets using a search query web.body="Metasoft" through cyberspace mapping tools such as Hunter.
1.
Function point location: