CVE-2018-9206
Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery- ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, GHSA. Niedriger laut Ubuntu (hoch).
Beschreibung
Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| npm::GitHub Security Advisory npm | blueimp-file-upload | 9.22.1 |
| debian 11 | libjs-jquery-file-upload | 9.25.0-1 |
| debian 12 | libjs-jquery-file-upload | 9.25.0-1 |
| debian 13 | libjs-jquery-file-upload | 9.25.0-1 |
| debian 14 | libjs-jquery-file-upload | 9.25.0-1 |
| echo | libjs-jquery-file-upload | 9.25.0-1 |
| ubuntu 18.04 | libjs-jquery-file-upload | 9.19.1-1ubuntu0.1 |
| ubuntu 18.04-ESM | libjs-jquery-file-upload | 9.19.1-1ubuntu0.1 |
| ubuntu 18.10 | libjs-jquery-file-upload | 9.21.0-1ubuntu0.1 |
Referenzen
- http://www.securityfocus.com/bid/105679
- http://www.securityfocus.com/bid/106629
- http://www.vapidlabs.com/advisory.php?v=204
- https://github.com/advisories/GHSA-4cj8-g9cp-v5wr
- https://github.com/blueimp/jQuery-File-Upload/pull/3514
- https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9206
- https://github.com/psolom/RichFilemanager/issues/354
- https://github.com/psolom/RichFilemanager/issues/412
Alle 16 Referenzen
- https://nvd.nist.gov/vuln/detail/CVE-2018-9206
- https://wpvulndb.com/vulnerabilities/9136
- https://www.cve.org/CVERecord?id=CVE-2018-9206
- https://www.exploit-db.com/exploits/45790
- https://www.exploit-db.com/exploits/45790/
- https://www.exploit-db.com/exploits/46182
- https://www.exploit-db.com/exploits/46182/
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html