CVE-2019-12185

Published: May 20, 2019Modified: Jun 17, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be written to the web root, and for code to execute on the remote server.

Affected (1)

Products: Elabftw: Elabftw

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Elabftw Elabftw	Version 1.8.5

Related CWEs

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (4)

http://incidentsecurity.com/elabftw-1-8-5-entitycontroller-arbitrary-file-upload-rce/

Source: cve@mitre.org

ExploitVendor AdvisoryURL Repurposed

https://github.com/fuzzlove/eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE

Source: cve@mitre.org

ExploitThird Party Advisory

http://incidentsecurity.com/elabftw-1-8-5-entitycontroller-arbitrary-file-upload-rce/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor AdvisoryURL Repurposed

https://github.com/fuzzlove/eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.