Description

Acunetix uploaded a ZIP file containing a symlink to /etc/passwd. It looks like that web application processed this file and returned the contents of /etc/passwd in response.

Remediation

The web application should filter symlinks included inside ZIP files.

References

Reading local files from Facebook's server

Related Vulnerabilities

WordPress Plugin Jigoshop Information Disclosure (1.17.9)

WordPress Plugin WP Easy Gallery 'add-gallery.php' Arbitrary File Upload (1.8)

WordPress Plugin ArcadePress 'upload.php' Arbitrary File Upload (0.65)

WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Arbitrary File Upload (1.3.5.4)

WordPress Plugin Invit0r 'ofc_upload_image.php' Arbitrary File Upload (0.22)

Severity

High

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Unauthenticated File Upload Information Disclosure