PT-2021-19917 · Micronaut · Micronaut

Jameskleeh + 1 · Published 2021-07-16 · Updated 2021-07-27 · CVE-2021-32769

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Micronaut versions prior to 2.5.9

Description A path traversal vulnerability exists in Micronaut, allowing access to any file from a filesystem using "/../../" in the URL. This occurs because Micronaut does not restrict file access to configured paths. With a basic configuration, it is possible to access sensitive information.

Recommendations For versions prior to 2.5.9, as a temporary workaround, do not use ** in mapping, use only *, which exposes only the flat structure of a directory not allowing traversal. If using Linux, another workaround is to run Micronaut in chroot. To fully resolve the issue, update to version 2.5.9 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-32769

GHSA-CJX7-399X-P2RJ

Affected Products

Micronaut

References · 8

• 🔥 https://github.com/micronaut-projects/micronaut-core/security/advisories/GHSA-cjx7-399x-p2rj · Exploit
• https://github.com/micronaut-projects/micronaut-core/commit/a0cfeb13bf1ef5d692d16d4a3b91b34b7456bb11 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-32769 · Security Note
• https://osv.dev/vulnerability/GHSA-cjx7-399x-p2rj · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-32769 · Vendor Advisory
• https://t.me/cibsecurity/26228 · Telegram Post
• https://t.me/cvenotify/18187 · Telegram Post
• https://t.me/cvenotify/17767 · Telegram Post