CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Input Validation
Summary: an issue was discovered in mindoc through v1.0.2. it allows attackers to gain privileges by uploading an image file with contents that represent an admin session, and then sending a cookie: header with a mindoc_id value containing the relative pathname of this uploaded file. for example, the mindoc_id (aka session id) could be of the form aa/../../uploads/blog/201811/attach_#.jpg where '#' is a hex value displayed in the upload field of a manage/blogs/edit/ screen.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-11-08
Last Modified Date: 2019-10-03