CVE-2017-15363 Luracast Restler directory traversal vulnerability
Remote attackers can read arbitrary files via a directory traversal flaw in the getsource.php script of the Luracast Restler library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-15363?
CVE-2017-15363 is a high-severity path traversal vulnerability in n/a, published on 15 Oct 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter.
Weakness: CWE-22
Which versions are affected by CVE-2017-15363?
4 open source packages ship an affected version, including aoe/restler and luracast/restler. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
aoe/restler Packagist | All versions | 1.7.1 |
aoe/restler Packagist | All versions | 1.7.1 |
luracast/restler Packagist | All versions | 3.1.0 |
luracast/restler Packagist | All versions | 3.1.0 |
Products include Luracast Restler.
How do I fix CVE-2017-15363?
Upgrade aoe/restler to 1.7.1 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2017-15363 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2017-15363 exists.
Public exploit code: 1 Nuclei template.
Sources
Also known as GHSA-rvmg-xc29-rvxf.