CVE-2012-1497 Path traversal in n/a
Authenticated template designers can read arbitrary files via directory traversal in Movable Type's default configuration.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-1497?
CVE-2012-1497 is a medium-severity path traversal vulnerability in n/a, published on 3 Mar 2012. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role.
Weakness: CWE-22
Which versions are affected by CVE-2012-1497?
It affects 4 products.
Products include Movabletype Movable Type Advanced, Movabletype Movable Type Enterprise, Movabletype Movable Type Open Source, Movabletype Movable Type Pro.
How do I fix CVE-2012-1497?
Upgrade to a fixed version.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2012-1497 being exploited?
There is no known exploitation of CVE-2012-1497 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-h855-xgmg-w8p2.