Lucene search
Veracode Vulnerability DatabaseVERACODE:33355HistoryDec 16, 2021 - 4:57 a.m.
Path Traversal
2021-12-1604:57:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
sulu
vulnerability
path traversal
symfonyexpressiontokenprovider.php
remote code execution
software
EPSS
0.003
Percentile
69.4%
sulu/sulu is vulnerable to path traversal. The library does not properly handle the default configuration in ‘SymfonyExpressionTokenProvider.php’, allowing an attacker to read the arbitrary local files via a PHP file include and its leads to remote code execution.
Related
osv
osv
CVE-2021-43836
2021-12-15 20:15:08
PHP file inclusion in the Sulu admin panel
2021-12-15 22:54:20
cnvd
cnvd
Sulu path traversal vulnerability
2021-12-17 00:00:00
prion
prion
Default configuration
2021-12-15 20:15:00
cvelist
cvelist
CVE-2021-43836 PHP file inclusion in the Sulu admin panel
2021-12-15 20:10:10
github
github
PHP file inclusion in the Sulu admin panel
2021-12-15 22:54:20
nvd
nvd
CVE-2021-43836
2021-12-15 20:15:08
cve
cve
CVE-2021-43836
2021-12-15 20:15:08