CVE-2018-16141

Name of the Vulnerable Software and Affected Versions ThinkCMF version X2.2.3

Description The issue allows for arbitrary file deletion. It is located in the do avatar function within the ProfileController.class.php file. The vulnerability can be exploited via the imgurl parameter by using a .. sequence. This enables a member user to delete any file on a Windows server.

Recommendations For ThinkCMF version X2.2.3, restrict access to the do avatar function in the ProfileController.class.php file to prevent arbitrary file deletion. Avoid using the imgurl parameter with a .. sequence in the affected API endpoint until the issue is resolved.