ProjectSend options.php未授权修改配置漏洞

详细信息

漏洞类型

其他

漏洞描述

r1720之前版本的ProjectSend版本受到不当身份验证漏洞的影响。未经身份验证的远程攻击者可以通过向options.php发送构建的HTTP请求来利用此缺陷，从而在未经授权的情况下修改应用程序的配置。成功利用该漏洞后，攻击者可以创建帐户、上传Webshell和嵌入恶意JavaScript。

修复建议

请升级到r1720或更高版本，参考链接： https://github.com/projectsend/projectsend/commit/193367d937b1a59ed5b68dd4e60bd53317473744

参考链接

• https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/projectsend_unauth_rce.rb

  CVE · exploit

• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/projectsend-auth-bypass.yaml

  CVE · exploit

• https://www.synacktiv.com/sites/default/files/2024-07/synacktiv-projectsend-multiple-vulnerabilities.pdf

  CVE · exploit · third-party-advisory

• https://github.com/projectsend/projectsend/commit/193367d937b1a59ed5b68dd4e60bd53317473744

  CVE · patch

• https://vulncheck.com/advisories/projectsend-bypass

  CVE · third-party-advisory

• https://github.com/projectdiscovery/nuclei-templates/blob/main/

  CNNVD

• https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/

  CNNVD

• https://osv.dev/vulnerability/CVE-2024-11680

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11680

  OSV · US Government Resource