Miggo Logo
Miggo Vulnerability Database
→
GHSA-q37h-jhf3-85cj

GHSA-q37h-jhf3-85cj: Bypass of CMS Safe Mode Security Feature

N/A

CVSS Score

Basic Information

CVE ID
-
GHSA ID
GHSA-q37h-jhf3-85cj
EPSS Score
-
CWE
-
Published
7/15/2022
Updated
1/12/2023
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
-
Package NameEcosystemVulnerable VersionsFirst Patched Version
wintercms/wintercomposer< 1.0.4751.0.475
wintercms/wintercomposer>= 1.1.0, < 1.1.91.1.9

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability allows bypassing Safe Mode checks during template modification. Core template manipulation methods like setAttribute in Template.php would be responsible for enforcing content restrictions. The backend controller's save handler (onSave) is a logical entry point for template edits. The high confidence in Template::setAttribute stems from its direct role in modifying template content, while the controller method receives medium confidence due to typical MVC patterns, though exact implementation details are inferred without commit diffs. The patch commit wintercms/storm@03eb5ce likely added Safe Mode checks to these critical points.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

### Imp**t *ut**nti**t** us*rs wit* p*rmissions to *r**t* or mo*i*y t**m* t*mpl*t* o*j**ts t*rou** t** ***k*n* "*MS" **itor **n *xploit t*is vuln*r**ility to *yp*ss t** `*ms.*n**l*S***Mo**` s**urity ***tur* i* *n**l** (*is**l*s mo*i*i**tion o* P*P *

Reasoning

T** vuln*r**ility *llows *yp*ssin* S*** Mo** ****ks *urin* t*mpl*t* mo*i*i**tion. *or* t*mpl*t* m*nipul*tion m*t*o*s lik* `s*t*ttri*ut*` in `T*mpl*t*.p*p` woul* ** r*sponsi*l* *or *n*or*in* *ont*nt r*stri*tions. T** ***k*n* *ontroll*r's s*v* **n*l*r