Lucene search
K

etcd-browser 87ae63d75260 Directory Traversal

🗓️ 28 Nov 2023 00:00:00Reported by Kevin RandallType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 360 Views

etcd-browser 87ae63d75260 Directory Traversal vulnerabilit

Code
`An issue was discovered in server.js in etcd-browser 87ae63d75260. By  
supplying a /../../../ Directory Traversal input to the URL's GET  
request while connecting to the remote server port specified during  
setup, an attacker can retrieve local operating system files from the  
remote system.  
  
------------------------------------------  
  
[Vulnerability Type]  
Directory Traversal  
  
------------------------------------------  
  
[Vendor of Product]  
https://hub.docker.com/r/buddho/etcd-browser  
  
------------------------------------------  
  
[Affected Product Code Base]  
etcd-browser - Unknown  
  
------------------------------------------  
  
[Affected Component]  
the server.js file does not validate the path for files.  
  
------------------------------------------  
  
[Attack Type]  
Remote  
  
------------------------------------------  
  
[Impact Information Disclosure]  
true  
  
------------------------------------------  
  
[CVE Impact Other]  
Allow for a remote arbitrary user to obtain local operating system files  
  
------------------------------------------  
  
[Attack Vectors]  
The attacker must supply a /../../ technique to the server application  
running on the remote port specified during setup  
  
------------------------------------------  
  
[Reference]  
https://hub.docker.com/r/buddho/etcd-browser  
https://hub.docker.com/r/buddho/etcd-browser/tags  
  
------------------------------------------  
  
[Discoverer]  
Kevin Randall  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation