CyberRota Analysis
AI-GeneratedAuthenticated backend users of REDAXO versions 5.18.2 to 5.21.1 can exploit a vulnerability in the media upload functionality to upload a malicious JPEG/PHP polyglot file, which may be executed by the web server. This poses a significant risk as it allows for remote code execution under the web server's user privileges. Organizations using affected versions of REDAXO should prioritize upgrading to version 5.21.1 to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rex_mediapool::isAllowedExtension in redaxo/src/addons/mediapool/lib/mediapool.php lets an authenticated backend user with media[upload] permission upload a JPEG/PHP polyglot named shell.php.any.jpg, which web servers with multi-extension PHP handlers can execute as the web-server user. This issue is fixed in version 5.21.1.