PT-2023-20730 · Syncfusion · Syncfusion Ej2 Node File Provider

Publicado 2023-07-12 · Atualizado 2023-07-26 · CVE-2023-26563

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Syncfusion EJ2 Node File Provider version 0102271

Description The issue allows an unauthenticated attacker to perform various malicious actions due to a directory traversal vulnerability in the filesystem-server.js component. On Windows, this includes listing files in any directory, reading any file, deleting any file, and uploading any file to any directory accessible by the web server. On Linux, an attacker can read any file, download any directory, delete any file, and upload any file to any directory accessible by the web server.

Recommendations As a temporary workaround, consider disabling the filesystem-server.js component until a patch is available. Restrict access to the vulnerable filesystem-server.js module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-26563

Produtos afetados

Syncfusion Ej2 Node File Provider

Referências · 7

• 🔥 https://github.com/RupturaInfoSec/CVE-2023-26563-26564-26565 · Exploit
• https://github.com/SyncfusionExamples/ej2-filemanager-node-filesystem · Nota
• https://ej2.syncfusion.com/documentation/file-manager/file-system-provider · Nota
• https://osv.dev/vulnerability/CVE-2023-26563 · Aviso do Fabricante
• https://t.me/cibsecurity/66606 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-26563 · Nota de Segurança
• https://t.me/cvenotify/55211 · Publicação no Telegram