{"id":35093,"date":"2025-05-06T00:18:31","date_gmt":"2025-05-06T00:18:31","guid":{"rendered":""},"modified":"2025-06-06T11:37:39","modified_gmt":"2025-06-06T17:37:39","slug":"cve-2025-46348-unauthenticated-backup-exploitation-of-yeswiki-prior-to-version-4-5-4","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-46348-unauthenticated-backup-exploitation-of-yeswiki-prior-to-version-4-5-4\/","title":{"rendered":"CVE-2025-46348: Unauthenticated Backup Exploitation of YesWiki Prior to Version 4.5.4<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2025-46348 vulnerability is a critical flaw in the YesWiki system, a widely used wiki platform built with PHP. This vulnerability has far-reaching implications as it affects all versions prior to 4.5.4 and could potentially lead to system compromise or data leakage. The issue lies in the backup process of the system where unauthenticated users can create and download site backups, hence causing potential threats to the security of sensitive site data<\/a>.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-46348
\nSeverity: Critical (CVSS: 10.0)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: System Compromise<\/a>, Data Leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

YesWiki | All versions prior<\/a> to 4.5.4<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The exploit takes advantage of the vulnerability in the backup process of YesWiki systems<\/a> where an unauthenticated user can initiate a backup and download it without needing authentication. Given that the system creates the archives with predictable filenames<\/a>, an attacker can easily generate and download these archives. Moreover, this vulnerability can also be exploited to perform<\/a> a Denial of Service (DoS) attack by continually creating archives until the file system is full.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

While the exact code to exploit this vulnerability<\/a> would vary, a conceptual example of a potential HTTP request to exploit this issue could look like this:<\/p>\n

GET \/backup\/archive.tar.gz HTTP\/1.1\nHost: targetsite.com<\/code><\/pre>\n
In this example, `archive.tar.gz` is the predictable filename of the backup archive<\/a>. A malicious actor could continuously send this request to both download the site’s backup and potentially fill up the server’s<\/a> disk space.<\/p>\n
Mitigation and Recommendations<\/strong><\/p>\n
The vulnerability has been patched in YesWiki version<\/a> 4.5.4. Users are strongly recommended to update their systems to this version or later to prevent potential<\/a> exploitation. For those who cannot immediately update their system, using a Web Application Firewall (WAF) or Intrusion Detection Systems (IDS) may provide a temporary mitigation. However, these are not long-term solutions and updating to the patched version remains the most secure option.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview The CVE-2025-46348 vulnerability is a critical flaw in the YesWiki system, a widely used wiki platform built with PHP. This vulnerability has far-reaching implications as it affects all versions prior to 4.5.4 and could potentially lead to system compromise or data leakage. The issue lies in the backup process of the system where unauthenticated […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[87],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-35093","post","type-post","status-publish","format-standard","hentry","category-uncategorized","attack_vector-dos"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t