PT-2018-13071 · Tecrail · Tecrail Responsive Filemanager

Simon Uvarov · Publicado 2018-08-24 · Atualizado 2018-10-17 · CVE-2018-15535

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions tecrail Responsive FileManager versions prior to 9.13.4

Description The issue allows an attacker to traverse directories by manipulating the pathname constructed from external input in the /filemanager/ajax calls.php file. This is due to the failure to properly neutralize sequences such as .. that can resolve to a location outside the intended directory.

Recommendations For versions prior to 9.13.4, update to version 9.13.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the /filemanager/ajax calls.php file to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-15535

Produtos afetados

Tecrail Responsive Filemanager

Referências · 4

• 🔥 https://exploit-db.com/exploits/45271 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2018/Aug/34 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-15535 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-15535 · Aviso do Fabricante