CVE-2023-26564 Path traversal in n/a
An unauthenticated attacker can exploit a directory traversal flaw in the Syncfusion EJ2 ASPCore File Provider to read, download, or upload arbitrary files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-26564?
CVE-2023-26564 is a critical path traversal vulnerability in n/a, published on 12 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible by the web server.
Weakness: CWE-22
Which versions are affected by CVE-2023-26564?
It affects 1 product.
Products include Syncfusion Ej2 Aspcore File Provider.
How do I fix CVE-2023-26564?
No fix has been published for CVE-2023-26564 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2023-26564 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-26564 exists.
Sources
Also known as GHSA-cgh5-9m3c-c3qx.