Skip to main content

Soplanning CVE-2024-27114

HIGH
Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
2024-09-11 csirt@divd.nl
8.9
CVSS 4.0 · Vendor: divd
Share

Severity by source

Vendor (divd) PRIMARY
8.9 HIGH
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:I/V:C/RE:M/U:Red

Primary rating from Vendor (divd) · only source for this CVE.

CVSS VectorVendor: divd

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:I/V:C/RE:M/U:Red
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
N

Lifecycle Timeline

1
CVE Published
Sep 11, 2024 - 14:15 cve.org
HIGH 8.9

DescriptionCVE.org

A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. If the public view setting is enabled, a attacker can upload a PHP-file that will be available for execution for a few milliseconds before it is removed, leading to execution of code on the underlying system. The vulnerability has been remediated in version 1.52.02.

AnalysisAI

A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. Rated high severity (CVSS 8.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-367. A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. If the public view setting is enabled, a attacker can upload a PHP-file that will be available for execution for a few milliseconds before it is removed, leading to execution of code on the underlying system. The vulnerability has been remediated in version 1.52.02. Affected products include: Soplanning. Version information: version 1.52.02..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2014-8676 MEDIUM POC
5.3 Aug 31

Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attacke

CVE-2014-8675 HIGH POC
7.5 Aug 31

Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which all

CVE-2024-57169 CRITICAL POC
9.8 Mar 18

A file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload.php. Rated critical sev

CVE-2024-27115 CRITICAL POC
10.0 Sep 11

A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. Rated crit

CVE-2020-9268 HIGH POC
7.5 Feb 18

SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nom_creat

CVE-2020-9269 HIGH POC
7.2 Feb 18

SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as

CVE-2024-57170 MEDIUM POC
6.5 Mar 18

SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. Rated medium severity (CVSS 6.5)

CVE-2020-9267 MEDIUM POC
6.5 Feb 18

SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajax_server.php. Rat

CVE-2020-9266 MEDIUM POC
6.5 Feb 18

SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xaja

CVE-2014-8677 MEDIUM POC
5.3 Aug 31

The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and

CVE-2020-15597 MEDIUM POC
5.4 Aug 11

SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment fi

CVE-2020-9339 MEDIUM POC
5.4 Feb 22

SOPlanning 1.45 allows XSS via the Name or Comment to status.php. Rated medium severity (CVSS 5.4), this vulnerability i

Share

CVE-2024-27114 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy