VulnerabilityDeferred
CVE-2024-25975
The POST parameters are not filtered properly and therefore an arbitrary file can be overwritten.
MEDIUM 6.5EPSS 0.59%
Does this matter?
Lower severity and a low EPSS score (0.59%). Track it; it rarely justifies an emergency change on its own.
Description
The application implements an up- and downvote function which alters a value within a JSON file. The POST parameters are not filtered properly and therefore an arbitrary file can be overwritten. The file can be controlled by an authenticated attacker, the content cannot be controlled. It is possible to overwrite all files for which the webserver has write access. It is required to supply a relative path (path traversal).
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 0.59% probability · 46th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-73
- Source
- 551230f0-3615-47bd-b7cc-93e92e730bbf
References
- http://seclists.org/fulldisclosure/2024/May/34
- https://github.com/HAWK-Digital-Environments/HAWKI/commit/146967f3148e92d1640ffebc21d8914e2d7fb3f1
- https://r.sec-consult.com/hawki
- http://seclists.org/fulldisclosure/2024/May/34
- https://github.com/HAWK-Digital-Environments/HAWKI/commit/146967f3148e92d1640ffebc21d8914e2d7fb3f1
- https://r.sec-consult.com/hawki
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.