Executive Summary

This vulnerability in the E-POINT CMS eagle.gsam-1169.1 file upload feature occurs because it improperly handles nested archive files. An attacker can upload a ZIP file that contains another ZIP file, where the inner ZIP includes an executable file such as a webshell.php. When the application extracts these archives, the executable may be placed into a web-accessible directory. This happens due to insufficient validation of the archive contents and inadequate restrictions on where files are extracted.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to remote code execution (RCE), allowing an attacker to run malicious code on the server. This can result in data disclosure, account compromise, or further system compromise depending on the privileges of the web server or process running the application.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should prevent the upload and extraction of nested archive files containing executable content. Implement strict validation of uploaded archive contents, disallow nested ZIP files, and restrict extraction targets to non-web-accessible directories. Additionally, apply proper access controls and ensure the web server runs with least privilege to limit potential impact.

Useful 0 Not Useful 0