CVE-2018-1000659 Path traversal in n/a

High 8.8 Published 6 Sep 2018 Updated 16 Sep 2024

Authenticated attackers can exploit a directory traversal in file uploads to execute remote code via webshells.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-1000659?

CVE-2018-1000659 is a high-severity path traversal vulnerability in Limesurvey Limesurvey, published on 6 Sep 2018. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

LimeSurvey version 3.14.4 and earlier contains a directory traversal in file upload that allows upload of webshell vulnerability in file upload functionality that can result in remote code execution as authenticated user. This attack appear to be exploitable via An authenticated user can upload a specially crafted zip file to get remote code execution. This vulnerability appears to have been fixed in after commit 72a02ebaaf95a80e26127ee7ee2b123cccce05a7 / version 3.14.4.

Weakness: CWE-22

Which versions are affected by CVE-2018-1000659?

It affects 1 product.

Products include Limesurvey Limesurvey.

How do I fix CVE-2018-1000659?

No fix has been published for CVE-2018-1000659 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2018-1000659 being exploited?

There is no known exploitation of CVE-2018-1000659 in the wild and no public exploit code.

All Limesurvey Limesurvey vulnerabilities

Sources

Also known as GHSA-v7xw-2w8g-gwpm.