An unrestricted file upload vulnerability in Wolf CMS allows authenticated attackers to achieve remote code execution on the underlying server.

This is an Unrestricted Upload of File with Dangerous Type (CWE-434) vulnerability that allows an authenticated user to bypass file restrictions and upload malicious payloads to the server.

With a CVSS score of 8.8, this vulnerability poses a critical threat to the integrity and confidentiality of the host environment. A successful exploit allows an attacker to gain remote code execution, which could lead to full system compromise, data exfiltration, and the deployment of persistent backdoors within the web application infrastructure.

Immediate Action: Upgrade to the latest available version of Wolf CMS if a patch is available, or restrict access to the Filemanager interface to trusted administrative users only.

Proactive Monitoring: Monitor web server logs for suspicious file uploads or access patterns directed toward the file manager or temporary upload directories.

Compensating Controls: Implement a Web Application Firewall (WAF) to inspect and block file uploads that contain unauthorized extensions or suspicious content.

Public Exploit Available: Unknown

Given the potential for remote code execution, organizations should prioritize securing their CMS installation. Immediate steps should include auditing user permissions and ensuring that the file management interface is not accessible to low privilege accounts.