An authenticated remote code execution vulnerability in BraveCMS allows attackers to execute arbitrary code by uploading malicious files through the CKEditor functionality.

This flaw is an unrestricted file upload vulnerability (CWE-434) located within the ckupload method of the CkEditorController.php file. It allows an authenticated user to bypass file type validation and upload executable PHP scripts to the server.

The ability for an authenticated user to execute arbitrary code on the server poses a critical risk to the confidentiality, integrity, and availability of the entire application environment. With a CVSS score of 8.8, this vulnerability could lead to a full system compromise, unauthorized data access, and potential lateral movement within the network.

Immediate Action: Upgrade to BraveCMS version 2.0.6 or later immediately to apply the necessary file type validation patches.

Proactive Monitoring: Review web server access logs for requests to non-media file extensions within the upload directories and monitor for suspicious execution patterns from the dashboard controller.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block uploads containing PHP, phtml, or other executable script extensions if the update cannot be applied immediately.

Public Exploit Available: No (No confirmed weaponized exploit or public PoC identified).

Given the severity of potential remote code execution, administrators must prioritize patching this vulnerability. Ensure that the update to version 2.0.6 is tested and deployed across all affected environments as soon as possible to prevent unauthorized system access.