Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-fzt2-896e-wudc

Summary

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the `/admin/misc/script-proxy` API endpoint that is accessible by an authenticated administrator user is vulnerable to arbitrary JavaScript and CSS file read via the `scriptPath` and `scripts` parameters. The `scriptPath` parameter is not sanitized properly and is vulnerable to path traversal attack. Any JavaScript/CSS file from the application server can be read by specifying sufficient number of `../` patterns to go out from the application webroot followed by path of the folder where the file is located in the "scriptPath" parameter and the file name in the "scripts" parameter. The JavaScript file is successfully read only if the web application has read access to it. Users should update to version 10.5.21 to receive a patch or, as a workaround, apply the patch manual.

Aliases

alias	CVE-2023-30852

alias	GHSA-j5c3-r84f-9596

Fixed_packages

url	pkg:composer/pimcore/pimcore@10.5.21
purl	pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21

Affected_packages

References

reference_url	https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4.patch
reference_id
reference_type
scores
url	https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4.patch

reference_url	https://github.com/pimcore/pimcore/pull/14959
reference_id
reference_type
scores
url	https://github.com/pimcore/pimcore/pull/14959

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2023-30852
reference_id	CVE-2023-30852
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2023-30852

reference_url	https://github.com/advisories/GHSA-j5c3-r84f-9596
reference_id	GHSA-j5c3-r84f-9596
reference_type
scores
url	https://github.com/advisories/GHSA-j5c3-r84f-9596

reference_url	https://github.com/pimcore/pimcore/security/advisories/GHSA-j5c3-r84f-9596
reference_id	GHSA-j5c3-r84f-9596
reference_type
scores
url	https://github.com/pimcore/pimcore/security/advisories/GHSA-j5c3-r84f-9596

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	22
name	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
description	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fzt2-896e-wudc

Vulnerability Instance