CVE-2012-2670
NONE EPSS 71.2%
Published Jun 17, 201214y ago · Modified Jun 16, 20262w ago
Published Jun 17, 2012 14y ago
Last Modified Jun 16, 2026 2w ago
Description
manageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg, then accessing it via a direct request to the file in files/standard/avatar.
Threat Intelligence
EPSS Exploit Probability
71.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-20 Improper Input Validation Validation
Affected Products 4
References 8
- archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2012-06/0007.html
- collabtive.o-dyn.de http://www.collabtive.o-dyn.de/blog/?p=426
- openwall.com http://www.openwall.com/lists/oss-security/2012/06/06/6
- openwall.com http://www.openwall.com/lists/oss-security/2012/06/06/9
- securityfocus.com http://www.securityfocus.com/archive/1/522973/30/0/threaded
- securityfocus.com http://www.securityfocus.com/bid/53813
- xync.org http://xync.org/2012/06/04/Arbitrary-File-Upload-in-Collabtive.html
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/76101
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.