CVE-2006-3936 Alkacon OpenCms Exposes JSP Source Code
Authenticated users can read arbitrary JSP source code via path traversal in the editor interface, exposing sensitive application logic.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-3936?
CVE-2006-3936 is a medium-severity path traversal vulnerability in n/a, published on 31 Jul 2006. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using index.jsp.
Which versions are affected by CVE-2006-3936?
2 open source packages ship an affected version, including org.opencms:opencms-core. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
org.opencms:opencms-core Maven | All versions | 6.2.2 |
org.opencms:opencms-core Maven | All versions | 6.2.2 |
Products include Alkacon Opencms.
How do I fix CVE-2006-3936?
Upgrade org.opencms:opencms-core to 6.2.2 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2006-3936 being exploited?
There is no known exploitation of CVE-2006-3936 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-c5vw-342h-x5rx.