VulnerabilityAnalyzed

CVE-2023-53944

EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to access files outside the document root by bypassing SecurityManager restrictions.

HIGH 7.1EPSS 0.93%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.93%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to access files outside the document root by bypassing SecurityManager restrictions. Attackers can send GET requests with encoded directory traversal sequences like /..%5c..%5c to read system files such as /windows/win.ini.

CVSS 4.0: 7.1 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.93% probability · 59th percentile
CISA KEV: Not listed
Weakness: CWE-22
Affected: easyphp/webserver
Source: disclosure@vulncheck.com

References

https://www.easyphp.org/Product
https://www.exploit-db.com/exploits/51430Exploit
https://www.vulncheck.com/advisories/easyphp-webserver-path-traversal-via-directory-traversal-sequencesExploit, Third Party Advisory
https://www.exploit-db.com/exploits/51430Exploit

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.