CVE-2024-30162

Invision Community through 4.7.16 allows remote code execution via the applications/core/modules/admin/editor/toolbar.php…

High · published June 7, 2024

CVSS v3.1
7.2
EPSS
1%
Percentile
52.7
In the wild
Unconfirmed
What it is

Invision Community through 4.7.16 allows remote code execution via the applications/core/modules/admin/editor/toolbar.php IPS\core\modules\admin\editor\_toolbar::addPlugin() method. This method handles uploaded ZIP files that are extracted into the applications/core/interface/ckeditor/ckeditor/plugins/ directory without properly verifying their content. This can be exploited by admin users (with the toolbar_manage permission) to write arbitrary PHP files into that directory, leading to execution of arbitrary PHP code in the context of the web server user.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00701 · 52.7th percentile
Published
2024-06-07T00:00Z
EPSS history
Timeline
  • 07 JUN 00:00Z
    Invision Community through 4.7.16 allows remote code execution via the applications/core/modules/admin/editor/toolbar.php…
    cvelistv5