CVE-2018-17984 Path traversal in n/a

High 7.8 Published 4 Oct 2018 Updated 5 Aug 2024

Authenticated users with local filesystem access can exploit an unanchored regex to include arbitrary files, leading to code execution.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-17984?

CVE-2018-17984 is a high-severity path traversal vulnerability in n/a, published on 4 Oct 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, leading to code execution. This is exploitable by authenticated users who have local filesystem access.

Weakness: CWE-185

Which versions are affected by CVE-2018-17984?

It affects 1 product.

Products include Ispconfig Ispconfig.

How do I fix CVE-2018-17984?

No fix has been published for CVE-2018-17984 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2018-17984 being exploited?

There is no known exploitation of CVE-2018-17984 in the wild and no public exploit code.

Sources

Also known as GHSA-8h5j-7xvq-97fq.