Description (CNA)
Typemill before 2.24.0 contains a path traversal vulnerability that allows authenticated attackers with Author-level privileges to read arbitrary files outside the content directory by supplying traversal sequences in the path query parameter passed to Storage::getFile() with an empty folder argument. Attackers can bypass traversal-prevention controls in Storage::getFolderPath() to access sensitive files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| typemill / typemill | affected 0 before 2.24.0 |
CWE
CWE-22
References
- https://github.com/typemill/typemill/releases/tag/v2.24.2
- https://github.com/typemill/typemill/commit/bfbb27001acd5c56ad62166dbefe6a59798cf1c0
- https://www.vulncheck.com/advisories/typemill-path-traversal-via-controllerapiimage-getpagemedia
ADP enrichment
No English description supplied.
No references supplied.