PT-2024-40026 · Unknown · Gregwar/Rst Library

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions gregwar/rst library (affected versions not specified)

Description A Local File Inclusion (LFI) issue has been found, which could expose sensitive server files to unauthorized users due to inadequate input validation. This allows an attacker to manipulate file paths and include arbitrary files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-2GQ2-M628-33XP

Affected Products

Gregwar/Rst Library

References · 6

• https://osv.dev/vulnerability/GHSA-2gq2-m628-33xp · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/gregwar/rst/2016-10-31.yaml · Note
• https://github.com/Gregwar/RST · Note
• https://github.com/Gregwar/RST/pull/34 · Note
• https://github.com/Gregwar/RST/commit/e8d90ccbeddd91ba3abc506079661dce234f9870 · Note
• https://hackerone.com/reports/179034 · Note