Gila · Gila Cms · CVE-2020-5512
**Name of the Vulnerable Software and Affected Versions**
Gila CMS version 1.11.8
**Description**
The issue allows for path traversal via the /admin/media endpoint. Specifically, the "path" parameter in the /admin/media?path=../ endpoint is vulnerable, allowing an attacker to traverse the directory structure.
**Recommendations**
For Gila CMS version 1.11.8, consider restricting access to the /admin/media endpoint until a patch is available. As a temporary workaround, avoid using the `path` parameter in the affected endpoint to minimize the risk of exploitation.