VulnerabilityAnalyzed
CVE-2023-53922
TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allows unauthenticated attackers to upload malicious PHP files.
CRITICAL 9.3EPSS 1.11%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.11%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allows unauthenticated attackers to upload malicious PHP files. Attackers can upload .phar files with embedded system commands to execute arbitrary code on the server by accessing the uploaded file's URL.
- CVSS 4.0
- 9.3 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 1.11% probability · 64th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-434
- Affected
- tinywebgallery/tinywebgallery
- Source
- disclosure@vulncheck.com
References
- http://www.tinywebgallery.com/Product
- https://www.exploit-db.com/exploits/51443Exploit, Third Party Advisory, VDB Entry
- https://www.vulncheck.com/advisories/tinywebgallery-remote-code-execution-via-unrestricted-file-uploadExploit, Third Party Advisory
- https://www.exploit-db.com/exploits/51443Exploit, Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.