Lucene search

CVE-2023-25168

🗓️ 09 Feb 2023 00:36:16Reported by [email protected]Type

Wings vulnerability for file deletion and overwrit

Reporter	Title	Published	Views	Family All 10
Prion	Design/Logic Flaw	9 Feb 202300:16	–	prion
Github Security Blog	Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system	10 Feb 202323:11	–	github
Cvelist	CVE-2023-25168 Symbolic Link (Symlink) Following allowing the deletion of files and directories on the host system in wings	8 Feb 202323:43	–	cvelist
OSV	Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system in github.com/pterodactyl/wings	20 Aug 202420:26	–	osv
OSV	Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system	10 Feb 202323:11	–	osv
OSV	Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following	8 Feb 202318:19	–	osv
OSV	CVE-2023-25152	8 Feb 202319:15	–	osv
OSV	CVE-2023-25168	9 Feb 202300:16	–	osv
CVE	CVE-2023-25168	9 Feb 202300:16	–	cve
Veracode	Arbitrary File Deletion	12 Feb 202315:47	–	veracode

Nvd

Node

pterodactyl wingsRange1.7.0–1.7.4

pterodactyl wingsMatch1.11.0-

pterodactyl wingsMatch1.11.1

pterodactyl wingsMatch1.11.2

pterodactyl wingsMatch1.11.3

Source	Link
github	www.github.com/pterodactyl/wings/security/advisories/GHSA-66p8-j459-rq63
github	www.github.com/pterodactyl/wings/security/advisories/GHSA-p8r3-83r8-jwj5
github	www.github.com/pterodactyl/wings/commit/429ac62dba22997a278bc709df5ac00a5a25d83d

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Feb 2023 00:16Current

9.3High risk

Vulners AI Score9.3

CVSS38.2

EPSS0.001

CWE-59