CVE-2019-13915 b3log Wide unauthenticated file access
Attackers can read or write arbitrary files via symlink manipulation in ZIP imports or Git repositories, or by executing code in the editor.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-13915?
CVE-2019-13915 is a high-severity path traversal vulnerability in n/a, published on 18 Jul 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
b3log Wide before 1.6.0 allows three types of attacks to access arbitrary files. First, the attacker can write code in the editor, and compile and run it approximately three times to read an arbitrary file. Second, the attacker can create a symlink, and then place the symlink into a ZIP archive. An unzip operation leads to read access, and write access (depending on file permissions), to the symlink target. Third, the attacker can import a Git repository that contains a symlink, similarly leading to read and write access.
Which versions are affected by CVE-2019-13915?
3 open source packages ship an affected version, including github.com/b3log/wide. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/b3log/wide Go | All versions | 1.6.0 |
github.com/b3log/wide Go | All versions | 1.6.0 |
github.com/b3log/wide Go | All versions | 1.6.0 |
Products include B3log Wide.
How do I fix CVE-2019-13915?
Upgrade github.com/b3log/wide to 1.6.0 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2019-13915 being exploited?
There is no known exploitation of CVE-2019-13915 in the wild and no public exploit code.
Sources
Also known as GHSA-6452-jr93-r5qm, GO-2023-1924.