GitHub Advisoryadvisory · Packagist

GHSA-h7f9-cvh5-qw7f Path traversal in pimcore/pimcore

HIGH Published 2021-02-25 Modified 2023-09-12 Official page ↗
Aliases
CVE-2021-23340
Ecosystem
Packagist
Packages
pimcore/pimcore
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Weaknesses
CWE-22
Reviewed
2021-02-24

Affected packages

• Packagist pimcore/pimcore: < 6.8.8 → fixed in 6.8.8

Description

This affects the package pimcore/pimcore before 6.8.8. A Local FIle Inclusion vulnerability exists in the downloadCsvAction function of the CustomReportController class (bundles/AdminBundle/Controller/Reports/CustomReportController.php). An authenticated user can reach this function with a GET request at the following endpoint: /admin/reports/custom-report/download-csv?exportFile=&91;filename]. Since exportFile variable is not sanitized, an attacker can exploit a local file inclusion vulnerability.

Related

Alias · CVE (1)

  • CVE-2021-23340 This affects the package pimcore/pimcore before 6.8.8. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References