PT-2014-2784 · Ruby · Wicked
Schneems
·
Publicado
2014-03-11
·
Atualizado
2017-10-24
·
CVE-2013-4413
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Wicked gem versions prior to 1.0.1
Description
The issue allows remote attackers to read arbitrary files via a %2E%2E%2F (encoded dot dot slash) in the step, due to a directory traversal vulnerability in controller/concerns/render redirect.rb. An attacker can send a specially-crafted URL request containing %2E%2E%2F directory traversal sequences to read arbitrary files on the system.
Recommendations
For Wicked gem versions prior to 1.0.1, update to version 1.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the
render redirect.rb file in the controller/concerns directory to minimize the risk of exploitation. Avoid using the %2E%2E%2F sequence in URL requests to the affected endpoint until the issue is resolved.Exploit
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Wicked