CVE-2020-10560 Path traversal in n/a
Attackers can read arbitrary files on the server by brute-forcing a weak random key in crafted URLs, potentially leading to further compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-10560?
CVE-2020-10560 is a medium-severity path traversal vulnerability in n/a, published on 30 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the SiteKey to insert into a crafted URL for components/OssnComments/ossn_com.php and/or libraries/ossn.lib.upgrade.php.
Weakness: CWE-338
Which versions are affected by CVE-2020-10560?
It affects 1 product.
Products include Opensource-Socialnetwork Open Source Social Network.
How do I fix CVE-2020-10560?
No fix has been published for CVE-2020-10560 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2020-10560 being exploited?
There is no known exploitation of CVE-2020-10560 in the wild and no public exploit code.
Public exploit code: 2 proofs of concept on GitHub.
Other vulnerabilities in n/a
Sources
Also known as GHSA-4ppm-32h4-4764.