Miggo Logo
Miggo Vulnerability Database
→
CVE-2018-14840

CVE-2018-14840: Subrion CMS Cross-site Scripting

6.1

CVSS Score
3.0

Basic Information

CVE ID
CVE-2018-14840
GHSA ID
GHSA-vhqr-3gr2-7px9
EPSS Score
0.8709%
CWE
CWE-79
Published
5/14/2022
Updated
9/21/2023
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
intelliants/subrioncomposer< 4.2.24.2.2

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability stems from a misconfiguration in the 'uploads/.htaccess' file, which failed to block .html file uploads. This allowed attackers to upload malicious HTML files leading to XSS. The core issue lies in server configuration (Apache directives in .htaccess) rather than specific PHP functions. While file upload handling functions might be involved indirectly, the provided data (commit diffs, CVE description) explicitly points to the .htaccess configuration as the root cause. No specific PHP functions in the codebase are identified with high confidence from the available information.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

`uplo**s/.*t****ss` in Su*rion *MS *.*.* *llows XSS ****us* it *o*s not *lo*k .*tml *il* uplo**s (*ut *o*s *lo*k, *or *x*mpl*, .*tm *il* uplo**s).

Reasoning

T** vuln*r**ility st*ms *rom * mis*on*i*ur*tion in t** 'uplo**s/.*t****ss' *il*, w*i** **il** to *lo*k .*tml *il* uplo**s. T*is *llow** *tt**k*rs to uplo** m*li*ious *TML *il*s l***in* to XSS. T** *or* issu* li*s in s*rv*r *on*i*ur*tion (*p**** *ir**