CVE-2024-36117 Path traversal while serving Reposilite javadoc expanded files
Attackers can read arbitrary files from the server via path traversal in Reposilite's javadoc serving feature.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-36117?
CVE-2024-36117 is a high-severity path traversal vulnerability in dzikoysk reposilite, published on 19 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this issue in version 3.5.12. There are no known workarounds for this vulnerability. This issue was discovered and reported by the GitHub Security lab and is also tracked as GHSL-2024-074.
Weakness: CWE-22
Which versions are affected by CVE-2024-36117?
2 open source packages ship an affected version, including com.reposilite:reposilite-backend. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
com.reposilite:reposilite-backend Maven | From 3.3.0 | 3.5.12 |
com.reposilite:reposilite-backend Maven | From 3.3.0 | 3.5.12 |
Products include Reposilite Reposilite.
How do I fix CVE-2024-36117?
Upgrade com.reposilite:reposilite-backend to 3.5.12 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2024-36117 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-36117 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in dzikoysk reposilite
Sources
Also known as GHSA-82j3-hf72-7x93.