PT-2023-20730 · Syncfusion · Syncfusion Ej2 Node File Provider

Published 2023-07-12 · Updated 2023-07-26 · CVE-2023-26563

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Syncfusion EJ2 Node File Provider version 0102271

Description The issue allows an unauthenticated attacker to perform various malicious actions due to a directory traversal vulnerability in the filesystem-server.js component. On Windows, this includes listing files in any directory, reading any file, deleting any file, and uploading any file to any directory accessible by the web server. On Linux, an attacker can read any file, download any directory, delete any file, and upload any file to any directory accessible by the web server.

Recommendations As a temporary workaround, consider disabling the filesystem-server.js component until a patch is available. Restrict access to the vulnerable filesystem-server.js module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-26563

Affected Products

Syncfusion Ej2 Node File Provider

References · 7

• 🔥 https://github.com/RupturaInfoSec/CVE-2023-26563-26564-26565 · Exploit
• https://osv.dev/vulnerability/CVE-2023-26563 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-26563 · Security Note
• https://github.com/SyncfusionExamples/ej2-filemanager-node-filesystem · Note
• https://ej2.syncfusion.com/documentation/file-manager/file-system-provider · Note
• https://t.me/cibsecurity/66606 · Telegram Post
• https://t.me/cvenotify/55211 · Telegram Post