CVE-2024-11311
Relative Path Traversal (CWE-23)
Summary
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
Impact
This vulnerability has a severe impact on the affected systems. Unauthenticated remote attackers can exploit this flaw to upload arbitrary files to any directory on the target system. This can lead to arbitrary code execution, typically through the upload of malicious webshells. The impact is classified as HIGH for confidentiality, integrity, and availability, indicating that attackers can potentially gain full control over the affected system, steal sensitive data, modify or destroy information, and disrupt normal operations.
Exploitation
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Patch
As of the current information provided, there is no mention of an available patch for this vulnerability. The security team should closely monitor for any updates or patches released by TRCore for the DVC component.
Mitigation
While awaiting a patch, consider the following mitigation strategies: 1. Implement strict network access controls to limit exposure of the DVC component. 2. Deploy Web Application Firewalls (WAF) to filter malicious file uploads and path traversal attempts. 3. Implement rigorous input validation and sanitization for file uploads. 4. Use the principle of least privilege for file system permissions. 5. Regularly monitor and audit file systems for unauthorized or suspicious files. 6. If possible, temporarily disable file upload functionality until a patch is available. 7. Keep all systems and software up-to-date with the latest security patches. 8. Implement intrusion detection and prevention systems to monitor for exploitation attempts.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
NVD published the first details for CVE-2024-11311
A CVSS base score of 9.8 has been assigned.
Feedly found the first article mentioning CVE-2024-11311. See article
Feedly estimated the CVSS score as HIGH
EPSS Score was set to: 0.09% (Percentile: 40.3%)