PT-2018-15376 · Febs · Febs-Shiro

Published 2018-12-25 · Updated 2024-08-05 · CVE-2018-20437

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FEBS-Shiro versions prior to 2018-11-05

Description An issue was discovered in the fileDownload function in the CommonController class. An attacker can download a file via a request of the form /common/download?filename=1.jsp&delete=false.

Recommendations For versions prior to 2018-11-05, as a temporary workaround, consider disabling the fileDownload function in the CommonController class until a patch is available. Restrict access to the /common/download API endpoint to minimize the risk of exploitation. Avoid using the filename and delete parameters in the affected API endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-20437

Affected Products

Febs-Shiro

References · 5

• 🔥❌ https://github.com/wuyouzhuguli/FEBS-Shiro/issues/40 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2018-20437 · Security Note
• https://osv.dev/vulnerability/CVE-2018-20437 · Vendor Advisory
• ❌ https://github.com/wuyouzhuguli/FEBS-Shiro/commit/a9706b1b3c96bacece24886429b4423c3a467acd · Patch, Deleted
• ❌ https://github.com/wuyouzhuguli/FEBS-Shiro/commit/9a753215b0969a5d5b5bfe8c68585339fee96260 · Patch, Deleted