Vulnerabilidades de Thexerteproject
CVEs publicadas que afetam produtos de Thexerteproject: 4 registro(s), com severidade, exploração e correções.
CVE-2026-41459
Média · 5.3
Exploit público CWE-497 22/04/2026
Xerte Online Toolkits Path Disclosure via /setup
Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full server-side filesystem path of the application root. Attackers can send a GET request to the /setup page to access the exposed root_path value rendered in the HTML response, which enables exploitation of path-dependent vulnerabilities such as relative path traversal in connector.php.
CVE-2026-34415
Crítica · 9.8
Exploit público CWE-184 22/04/2026
Xerte Online Toolkits: validação incompleta no conector elFinder leva a RCE
Os Xerte Online Toolkits na versão 3.15 e anteriores contêm uma vulnerabilidade de validação de entrada incompleta no endpoint do conector elFinder, que não bloqueia extensões executáveis em PHP, como .php4, devido a um padrão de expressão regular incorreto. Atacantes não autenticados podem explorar essa falha combinada com vulnerabilidades de bypass de autenticação e path traversal para enviar código PHP malicioso, renomeá-lo com a extensão .php4 e executar comandos arbitrários do sistema operacional no servidor.
CVE-2026-34414
Alta · 7.1
Exploit público CWE-22 22/04/2026
Xerte Online Toolkits Path Traversal via connector.php
Xerte Online Toolkits versions 3.15 and earlier contain a relative path traversal vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php where the name parameter in rename commands is not sanitized for path traversal sequences. Attackers can supply a name value containing directory traversal sequences to move files from project media directories to arbitrary locations on the filesystem, potentially overwriting application files, achieving stored cross-site scripting, or combining with other vulnerabilities to achieve unauthenticated remote code execution by moving PHP code files to the application root.
CVE-2026-34413
Alta · 8.6
Exploit público CWE-497 22/04/2026
Xerte Online Toolkits Missing Authentication via connector.php
Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php where an HTTP redirect to unauthenticated callers does not call exit() or die(), allowing PHP execution to continue and process the full request server-side. Unauthenticated attackers can perform file operations on project media directories including creating directories, uploading files, renaming files, duplicating files, overwriting files, and deleting files, which can be chained with path traversal and extension blocklist vulnerabilities to achieve remote code execution and arbitrary file read.