关键信息 漏洞概述 EDB-ID: 44391 CVE: 2018-8811 Author: SURESHBABU NARVANENI Type: WEBAPPS Platform: PHP Date: 2018-04-02 Vulnerable App: OpenCMS Affected Version: 10.5.3 漏洞描述 Exploit Title: OpenCMS 10.5.3 Multiple Cross Site Request Forgery Vulnerabilities Injection Technical Description: Cross-site request forgery (CSRF) vulnerability in system/workplace/admin/accounts/user_role.jsp in OpenCMS 10.5.3 allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. Proof of Concept: - Send a crafted request to a logged-in user with Root Administrator level access. Once the logged-in user opens the URL, the form will get submitted with the active session of the root administrator, and the action will be performed successfully. By leveraging this vulnerability, the user can gain Root Level Administrator Access to the CMS. 解决方案 Upgrade to the latest release. Link 参考 GitHub Issue CVE Entry