cvelistv5 - cve-2022-38078

CVE-2022-38078 (GCVE-0-2022-38078)

Vulnerability from cvelistv5 – Published: 2022-08-24 08:40 – Updated: 2024-08-03 10:45

Summary

Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability.

Severity ?

No CVSS data available.

CWE

Command Injection

Assigner

jpcert

References

URL

Tags

	https://movabletype.org/news/2022/08/mt-795-687-r…	x_refsource_MISC
	https://jvn.jp/en/jp/JVN57728859/index.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Six Apart Ltd.	Movable Type XMLRPC API	Affected: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T10:45:52.350Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://movabletype.org/news/2022/08/mt-795-687-released.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN57728859/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Movable Type XMLRPC API",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Command Injection",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-24T08:40:42",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://movabletype.org/news/2022/08/mt-795-687-released.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jvn.jp/en/jp/JVN57728859/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2022-38078",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Movable Type XMLRPC API",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Six Apart Ltd."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Command Injection"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://movabletype.org/news/2022/08/mt-795-687-released.html",
              "refsource": "MISC",
              "url": "https://movabletype.org/news/2022/08/mt-795-687-released.html"
            },
            {
              "name": "https://jvn.jp/en/jp/JVN57728859/index.html",
              "refsource": "MISC",
              "url": "https://jvn.jp/en/jp/JVN57728859/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2022-38078",
    "datePublished": "2022-08-24T08:40:42",
    "dateReserved": "2022-08-22T00:00:00",
    "dateUpdated": "2024-08-03T10:45:52.350Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium:*:*:*\", \"versionEndExcluding\": \"1.53\", \"matchCriteriaId\": \"0D577668-2998-4089-A413-EBED87A24142\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium_advanced:*:*:*\", \"versionEndExcluding\": \"1.53\", \"matchCriteriaId\": \"0F88E29B-EFA9-4272-ADDB-070A2E5EA377\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:-:*:*\", \"versionStartIncluding\": \"6.0.0\", \"versionEndExcluding\": \"6.8.7\", \"matchCriteriaId\": \"F6A4EAEA-B95F-45C7-BB51-B7A826144EED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:aws:*:*\", \"versionStartIncluding\": \"6.0.0\", \"versionEndExcluding\": \"6.8.7\", \"matchCriteriaId\": \"CA49252A-03B1-4B74-960F-3C63B9768F55\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:-:*:*\", \"versionStartIncluding\": \"6.0.0\", \"versionEndExcluding\": \"6.8.7\", \"matchCriteriaId\": \"2A418283-AAB2-4498-9228-60AF729A71CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:aws:*:*\", \"versionStartIncluding\": \"6.0.0\", \"versionEndExcluding\": \"6.8.7\", \"matchCriteriaId\": \"2F19ADA4-B866-41E0-81A0-121CC67CA072\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:-:*:*\", \"versionStartIncluding\": \"7.0.0\", \"versionEndExcluding\": \"7.9.5\", \"matchCriteriaId\": \"21F7AEA4-802D-4934-9465-C94AF8828644\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:aws:*:*\", \"versionStartIncluding\": \"7.0.0\", \"versionEndExcluding\": \"7.9.5\", \"matchCriteriaId\": \"1C9F5F22-69D6-4709-83E4-877833D3519B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:-:*:*\", \"versionStartIncluding\": \"7.0.0\", \"versionEndExcluding\": \"7.9.5\", \"matchCriteriaId\": \"6AD32302-6F49-485D-B5BD-4B652ED63DAA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:aws:*:*\", \"versionStartIncluding\": \"7.0.0\", \"versionEndExcluding\": \"7.9.5\", \"matchCriteriaId\": \"E9E3AF0B-4462-413C-A4B6-A9ED010E3AE8\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability.\"}, {\"lang\": \"es\", \"value\": \"La API XMLRPC de Movable Type proporcionada por Six Apart Ltd. contiene una vulnerabilidad de inyecci\\u00f3n de comandos. El env\\u00edo de un mensaje especialmente dise\\u00f1ado mediante el m\\u00e9todo POST a la API Movable Type XMLRPC puede permitir una ejecuci\\u00f3n de un script Perl arbitrario, y un comando OS arbitrario puede ser ejecutado mediante \\u00e9l. Los productos y versiones afectados son los siguientes Movable Type 7 versiones r.5202 y anteriores, Movable Type Advanced 7 versiones r.5202 y anteriores, Movable Type versiones 6.8.6 y anteriores, Movable Type Advanced versiones 6.8.6 y anteriores, Movable Type Premium versiones 1.52 y anteriores, y Movable Type Premium Advanced versiones 1.52 y anteriores. Tenga en cuenta que todas las versiones de Movable Type versiones 4.0 o posteriores, incluidas las versiones sin soporte (End-of-Life, EOL), tambi\\u00e9n est\\u00e1n afectadas por esta vulnerabilidad.\"}]",
      "id": "CVE-2022-38078",
      "lastModified": "2024-11-21T07:15:44.153",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}]}",
      "published": "2022-08-24T09:15:08.493",
      "references": "[{\"url\": \"https://jvn.jp/en/jp/JVN57728859/index.html\", \"source\": \"vultures@jpcert.or.jp\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://movabletype.org/news/2022/08/mt-795-687-released.html\", \"source\": \"vultures@jpcert.or.jp\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://jvn.jp/en/jp/JVN57728859/index.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://movabletype.org/news/2022/08/mt-795-687-released.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "vultures@jpcert.or.jp",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-94\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-38078\",\"sourceIdentifier\":\"vultures@jpcert.or.jp\",\"published\":\"2022-08-24T09:15:08.493\",\"lastModified\":\"2024-11-21T07:15:44.153\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability.\"},{\"lang\":\"es\",\"value\":\"La API XMLRPC de Movable Type proporcionada por Six Apart Ltd. contiene una vulnerabilidad de inyecci\u00f3n de comandos. El env\u00edo de un mensaje especialmente dise\u00f1ado mediante el m\u00e9todo POST a la API Movable Type XMLRPC puede permitir una ejecuci\u00f3n de un script Perl arbitrario, y un comando OS arbitrario puede ser ejecutado mediante \u00e9l. Los productos y versiones afectados son los siguientes Movable Type 7 versiones r.5202 y anteriores, Movable Type Advanced 7 versiones r.5202 y anteriores, Movable Type versiones 6.8.6 y anteriores, Movable Type Advanced versiones 6.8.6 y anteriores, Movable Type Premium versiones 1.52 y anteriores, y Movable Type Premium Advanced versiones 1.52 y anteriores. Tenga en cuenta que todas las versiones de Movable Type versiones 4.0 o posteriores, incluidas las versiones sin soporte (End-of-Life, EOL), tambi\u00e9n est\u00e1n afectadas por esta vulnerabilidad.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-94\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium:*:*:*\",\"versionEndExcluding\":\"1.53\",\"matchCriteriaId\":\"0D577668-2998-4089-A413-EBED87A24142\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium_advanced:*:*:*\",\"versionEndExcluding\":\"1.53\",\"matchCriteriaId\":\"0F88E29B-EFA9-4272-ADDB-070A2E5EA377\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:-:*:*\",\"versionStartIncluding\":\"6.0.0\",\"versionEndExcluding\":\"6.8.7\",\"matchCriteriaId\":\"F6A4EAEA-B95F-45C7-BB51-B7A826144EED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:aws:*:*\",\"versionStartIncluding\":\"6.0.0\",\"versionEndExcluding\":\"6.8.7\",\"matchCriteriaId\":\"CA49252A-03B1-4B74-960F-3C63B9768F55\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:-:*:*\",\"versionStartIncluding\":\"6.0.0\",\"versionEndExcluding\":\"6.8.7\",\"matchCriteriaId\":\"2A418283-AAB2-4498-9228-60AF729A71CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:aws:*:*\",\"versionStartIncluding\":\"6.0.0\",\"versionEndExcluding\":\"6.8.7\",\"matchCriteriaId\":\"2F19ADA4-B866-41E0-81A0-121CC67CA072\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:-:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.9.5\",\"matchCriteriaId\":\"21F7AEA4-802D-4934-9465-C94AF8828644\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:aws:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.9.5\",\"matchCriteriaId\":\"1C9F5F22-69D6-4709-83E4-877833D3519B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:-:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.9.5\",\"matchCriteriaId\":\"6AD32302-6F49-485D-B5BD-4B652ED63DAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:aws:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.9.5\",\"matchCriteriaId\":\"E9E3AF0B-4462-413C-A4B6-A9ED010E3AE8\"}]}]}],\"references\":[{\"url\":\"https://jvn.jp/en/jp/JVN57728859/index.html\",\"source\":\"vultures@jpcert.or.jp\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://movabletype.org/news/2022/08/mt-795-687-released.html\",\"source\":\"vultures@jpcert.or.jp\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://jvn.jp/en/jp/JVN57728859/index.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://movabletype.org/news/2022/08/mt-795-687-released.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}

FKIE_CVE-2022-38078

Vulnerability from fkie_nvd - Published: 2022-08-24 09:15 - Updated: 2024-11-21 07:15

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
vultures@jpcert.or.jp	https://jvn.jp/en/jp/JVN57728859/index.html	Third Party Advisory
vultures@jpcert.or.jp	https://movabletype.org/news/2022/08/mt-795-687-released.html	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://jvn.jp/en/jp/JVN57728859/index.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://movabletype.org/news/2022/08/mt-795-687-released.html	Vendor Advisory

Impacted products

Vendor	Product	Version
sixapart	movable_type	*
sixapart	movable_type	*
sixapart	movable_type	*
sixapart	movable_type	*
sixapart	movable_type	*
sixapart	movable_type	*
sixapart	movable_type	*
sixapart	movable_type	*
sixapart	movable_type	*
sixapart	movable_type	*

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium:*:*:*",
              "matchCriteriaId": "0D577668-2998-4089-A413-EBED87A24142",
              "versionEndExcluding": "1.53",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium_advanced:*:*:*",
              "matchCriteriaId": "0F88E29B-EFA9-4272-ADDB-070A2E5EA377",
              "versionEndExcluding": "1.53",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:-:*:*",
              "matchCriteriaId": "F6A4EAEA-B95F-45C7-BB51-B7A826144EED",
              "versionEndExcluding": "6.8.7",
              "versionStartIncluding": "6.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:aws:*:*",
              "matchCriteriaId": "CA49252A-03B1-4B74-960F-3C63B9768F55",
              "versionEndExcluding": "6.8.7",
              "versionStartIncluding": "6.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:-:*:*",
              "matchCriteriaId": "2A418283-AAB2-4498-9228-60AF729A71CF",
              "versionEndExcluding": "6.8.7",
              "versionStartIncluding": "6.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:aws:*:*",
              "matchCriteriaId": "2F19ADA4-B866-41E0-81A0-121CC67CA072",
              "versionEndExcluding": "6.8.7",
              "versionStartIncluding": "6.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:-:*:*",
              "matchCriteriaId": "21F7AEA4-802D-4934-9465-C94AF8828644",
              "versionEndExcluding": "7.9.5",
              "versionStartIncluding": "7.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:aws:*:*",
              "matchCriteriaId": "1C9F5F22-69D6-4709-83E4-877833D3519B",
              "versionEndExcluding": "7.9.5",
              "versionStartIncluding": "7.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:-:*:*",
              "matchCriteriaId": "6AD32302-6F49-485D-B5BD-4B652ED63DAA",
              "versionEndExcluding": "7.9.5",
              "versionStartIncluding": "7.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:aws:*:*",
              "matchCriteriaId": "E9E3AF0B-4462-413C-A4B6-A9ED010E3AE8",
              "versionEndExcluding": "7.9.5",
              "versionStartIncluding": "7.0.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability."
    },
    {
      "lang": "es",
      "value": "La API XMLRPC de Movable Type proporcionada por Six Apart Ltd. contiene una vulnerabilidad de inyecci\u00f3n de comandos. El env\u00edo de un mensaje especialmente dise\u00f1ado mediante el m\u00e9todo POST a la API Movable Type XMLRPC puede permitir una ejecuci\u00f3n de un script Perl arbitrario, y un comando OS arbitrario puede ser ejecutado mediante \u00e9l. Los productos y versiones afectados son los siguientes Movable Type 7 versiones r.5202 y anteriores, Movable Type Advanced 7 versiones r.5202 y anteriores, Movable Type versiones 6.8.6 y anteriores, Movable Type Advanced versiones 6.8.6 y anteriores, Movable Type Premium versiones 1.52 y anteriores, y Movable Type Premium Advanced versiones 1.52 y anteriores. Tenga en cuenta que todas las versiones de Movable Type versiones 4.0 o posteriores, incluidas las versiones sin soporte (End-of-Life, EOL), tambi\u00e9n est\u00e1n afectadas por esta vulnerabilidad."
    }
  ],
  "id": "CVE-2022-38078",
  "lastModified": "2024-11-21T07:15:44.153",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2022-08-24T09:15:08.493",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://jvn.jp/en/jp/JVN57728859/index.html"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://movabletype.org/news/2022/08/mt-795-687-released.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://jvn.jp/en/jp/JVN57728859/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://movabletype.org/news/2022/08/mt-795-687-released.html"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-F342-4Q2C-V2Q2

Vulnerability from github – Published: 2022-08-25 00:00 – Updated: 2022-09-01 00:00

Details

Severity ?

9.8 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-38078"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-78"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-08-24T09:15:00Z",
    "severity": "CRITICAL"
  },
  "details": "Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability.",
  "id": "GHSA-f342-4q2c-v2q2",
  "modified": "2022-09-01T00:00:24Z",
  "published": "2022-08-25T00:00:29Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38078"
    },
    {
      "type": "WEB",
      "url": "https://jvn.jp/en/jp/JVN57728859/index.html"
    },
    {
      "type": "WEB",
      "url": "https://movabletype.org/news/2022/08/mt-795-687-released.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2022-38078

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2022-38078

Aliases

CVE-2022-38078

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2022-38078",
    "description": "Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability.",
    "id": "GSD-2022-38078"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-38078"
      ],
      "details": "Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability.",
      "id": "GSD-2022-38078",
      "modified": "2023-12-13T01:19:22.701493Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "vultures@jpcert.or.jp",
        "ID": "CVE-2022-38078",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Movable Type XMLRPC API",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Six Apart Ltd."
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Command Injection"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://movabletype.org/news/2022/08/mt-795-687-released.html",
            "refsource": "MISC",
            "url": "https://movabletype.org/news/2022/08/mt-795-687-released.html"
          },
          {
            "name": "https://jvn.jp/en/jp/JVN57728859/index.html",
            "refsource": "MISC",
            "url": "https://jvn.jp/en/jp/JVN57728859/index.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:aws:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.8.7",
                "versionStartIncluding": "6.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:aws:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.8.7",
                "versionStartIncluding": "6.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:-:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.8.7",
                "versionStartIncluding": "6.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:-:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.8.7",
                "versionStartIncluding": "6.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:aws:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.9.5",
                "versionStartIncluding": "7.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:aws:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.9.5",
                "versionStartIncluding": "7.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:-:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.9.5",
                "versionStartIncluding": "7.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:-:-:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.9.5",
                "versionStartIncluding": "7.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "1.53",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium_advanced:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "1.53",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2022-38078"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-78"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://movabletype.org/news/2022/08/mt-795-687-released.html",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://movabletype.org/news/2022/08/mt-795-687-released.html"
            },
            {
              "name": "https://jvn.jp/en/jp/JVN57728859/index.html",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://jvn.jp/en/jp/JVN57728859/index.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2022-08-31T15:58Z",
      "publishedDate": "2022-08-24T09:15Z"
    }
  }
}

JVNDB-2022-000064

Vulnerability from jvndb - Published: 2022-08-24 15:58 - Updated:2024-06-13 18:11

Severity ?

9.8 (Critical) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Movable Type XMLRPC API vulnerable to command injection

Details

Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability (CWE-74). Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. According to the developer, it is unable to execute a command with an arbitrary value added to its argument, even if the vulnerability is exploited. Osaka University of Economics reported this vulnerability to Six Apart Ltd. and coordinated. Six Apart Ltd. and JPCERT/CC published respective advisories in order to notify users of this vulnerability. And almost at the same time, SHIGA TAKUMA of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with Six Apart Ltd. under Information Security Early Warning Partnership.

References

Type

URL

	JVN	https://jvn.jp/en/jp/JVN57728859/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2022-38078
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-38078
	IPA SECURITY ALERTS	https://www.ipa.go.jp/security/ciadr/vul/20220824-jvn.html
	JPCERT	https://www.jpcert.or.jp/english/at/2022/at220022.html
	OS Command Injection(CWE-78)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

Six Apart, Ltd.

Movable Type

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000064.html",
  "dc:date": "2024-06-13T18:11+09:00",
  "dcterms:issued": "2022-08-24T15:58+09:00",
  "dcterms:modified": "2024-06-13T18:11+09:00",
  "description": "Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability (CWE-74).\r\nSending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it.\r\nAccording to the developer, it is unable to execute a command with an arbitrary value added to its argument, even if the vulnerability is exploited.\r\n\r\nOsaka University of Economics reported this vulnerability to Six Apart Ltd. and coordinated. Six Apart Ltd. and JPCERT/CC published respective advisories in order to notify users of this vulnerability.\r\n\r\nAnd almost at the same time, SHIGA TAKUMA of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with Six Apart Ltd. under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000064.html",
  "sec:cpe": {
    "#text": "cpe:/a:sixapart:movable_type",
    "@product": "Movable Type",
    "@vendor": "Six Apart, Ltd.",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "7.5",
      "@severity": "High",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "9.8",
      "@severity": "Critical",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2022-000064",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN57728859/index.html",
      "@id": "JVN#57728859",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2022-38078",
      "@id": "CVE-2022-38078",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-38078",
      "@id": "CVE-2022-38078",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/security/ciadr/vul/20220824-jvn.html",
      "@id": "JVN#57728859",
      "@source": "IPA SECURITY ALERTS"
    },
    {
      "#text": "https://www.jpcert.or.jp/english/at/2022/at220022.html",
      "@id": "Alert Regarding Vulnerability in Movable Type XMLRPC API",
      "@source": "JPCERT"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-78",
      "@title": "OS Command Injection(CWE-78)"
    }
  ],
  "title": "Movable Type XMLRPC API vulnerable to command injection"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2022-38078 (GCVE-0-2022-38078)

FKIE_CVE-2022-38078

GHSA-F342-4Q2C-V2Q2

GSD-2022-38078

JVNDB-2022-000064

Tags

Sightings

Nomenclature