PT-2020-14302 · Requarks · Wiki.Js

Daniellivingston · Published 2020-10-05 · Updated 2020-10-09 · CVE-2020-15236

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Wiki.js versions prior to 2.5.151

Description A directory traversal issue is possible when a storage module with local asset cache fetching is enabled, allowing a malicious user to read any file on the file system by crafting a special URL. This issue is only exploitable when a storage module implementing local asset cache, such as Local File System or Git, is enabled and no web application firewall solution, like cloudflare, strips potentially malicious URLs.

Recommendations For versions prior to 2.5.151, as a temporary workaround, consider disabling any storage module with local asset caching capabilities, such as Local File System and Git, until a patch is available. Update to version 2.5.151 or later, which includes the fix that sanitizes the path before it is passed on to the storage module, removing any directory traversal sequences and invalid filesystem characters.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-15236

GHSA-WHPV-5XG2-W527

Affected Products

Wiki.Js

References · 4

• https://github.com/Requarks/wiki/commit/084dcd69d1591586ee4752101e675d5f0ac6dcdc · Patch
• https://osv.dev/vulnerability/CVE-2020-15236 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15236 · Security Note
• https://github.com/Requarks/wiki/security/advisories/GHSA-whpv-5xg2-w527 · Note