Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS14dnY5LTVqNjctM3Jwcc4AA1Ra

zola Path Traversal vulnerability

An issue was discovered in zola 0.13.0 through 0.17.2. The custom implementation of a web server, available via the "zola serve" command, allows directory traversal. The handle_request function, used by the server to process HTTP requests, does not account for sequences of special path control characters (../) in the URL when serving a file, which allows one to escape the webroot of the server and read arbitrary files from the filesystem.

Permalink: https://github.com/advisories/GHSA-xvv9-5j67-3rpq
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14dnY5LTVqNjctM3Jwcc4AA1Ra
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: 9 months ago
Updated: 6 months ago

CVSS Score: 7.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Identifiers: GHSA-xvv9-5j67-3rpq, CVE-2023-40274
References:

• https://nvd.nist.gov/vuln/detail/CVE-2023-40274
• https://github.com/getzola/zola/issues/2257
• https://github.com/getzola/zola/pull/2258
• https://github.com/advisories/GHSA-xvv9-5j67-3rpq

Repository: https://github.com/getzola/zola
Blast Radius: 1.0

Affected Packages