Description

Restler is a simple and effective multi-format Web API Server to host your PHP API as Pragmatic REST and / or RESTful API.

The Typo3 Restler extension version 1.7.0 (and earlier versions) suffers from a local file disclosure vulnerability that allows an attacker to read arbitrary system files.

Remediation

Upgrade to the latest version of Typo3 Restler extension.

References

Typo3 Restler 1.7.0 Local File Disclosure

Restler

Related Vulnerabilities

WordPress Plugin Site Editor-WordPress Site Builder-Theme Builder and Page Builder Local File Inclusion (1.1.1)

WordPress Plugin Thinkun Remind 'dirPath' Parameter Information Disclosure (1.1.3)

WordPress Plugin Ajax Pagination (twitter Style) Local File Inclusion (1.1)

Tomcat path traversal via reverse proxy mapping

Ruby on Rails directory traversal vulnerability

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Tags

Directory Traversal