^{CVE-2020-28145:}Arbitrary file deletion vulnerability in wuzhicms v4.0.1 allows attackers to delete files and potentially access sensitive information.

Overview

The arbitrary file deletion vulnerability in wuzhicms v4.0.1 allows attackers to delete files outside the intended scope of the application. The vulnerability is present in the attachment management module's admin interface. When exploited successfully, an attacker can manipulate file paths to target and delete critical system files or user data. This can lead to system instability, denial of service conditions, or potentially allow further exploitation by removing security controls or log files. The vulnerability has been publicly disclosed and documented in both GitHub issue trackers and the China National Vulnerability Database (CNVD).

Remediation

To remediate this vulnerability, system administrators should:

1. Update wuzhicms to the latest version if a patch is available.
2. If no patch is available, implement proper input validation and path sanitization in the affected file (coreframe\app\attachment\admin\index.php).
3. Restrict access to the admin interface using strong authentication mechanisms.
4. Implement file operation restrictions that prevent deletion of files outside the intended directory structure.
5. Consider implementing file system monitoring to detect unauthorized deletion attempts.
6. Regularly backup important system files and data to mitigate the impact of successful exploits.
7. Review server logs for any signs of exploitation attempts.

References

1. GitHub Issue: https://github.com/wuzhicms/wuzhicms/issues/191 This issue contains details about the vulnerability discovery and potentially proof-of-concept code.

2. CNVD Reference: https://www.cnvd.org.cn/flaw/show/2394661 The China National Vulnerability Database entry for this vulnerability provides additional information and verification.

3. CWE-668: Exposure of Resource to Wrong Sphere https://cwe.mitre.org/data/definitions/668.html