CVE-2018-1000811

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2018-1000811

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000811.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-1000811

Published

2018-12-20T15:29:00.297Z

Modified

2026-07-08T14:58:47.090688Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.

References

Affected packages

Git / github.com/bludit/bludit

Affected ranges

Type

GIT

Repo

https://github.com/bludit/bludit

Events

Introduced

8dfdd16fb4542df163409d76e8373900885d5cf5

Last affected

8dfdd16fb4542df163409d76e8373900885d5cf5

Database specific

{
    "cpe": "cpe:2.3:a:bludit:bludit:3.0.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.0.0"
        },
        {
            "last_affected": "3.0.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

3.*

3.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000811.json"