GitHub Advisoryadvisory · Packagist

GHSA-pqcf-v8v5-jmcg Zip slip in Microweber

HIGH Published 2022-02-10 Modified 2021-05-07 Official page ↗
Aliases
CVE-2020-28337
Ecosystem
Packagist
Packages
microweber/microweber
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-22
Reviewed
2021-05-07

Affected packages

• Packagist microweber/microweber: < 1.2.3 → fixed in 1.2.3

Description

A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the credentials of an administrative user, upload a maliciously constructed ZIP file with file paths including relative paths (i.e., ../../), move this file into the backup directory, and execute a restore on this file.

Related

Alias · CVE (1)

  • CVE-2020-28337 A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References