GHSA-2gq2-m628-33xp
GHSA-2gq2-m628-33xp · gregwar/rst Local File Inclusion Vulnerability
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
A Local File Inclusion (LFI) vulnerability has been discovered in the gregwar/rst library, potentially exposing sensitive files on the server to unauthorized users. The issue arises from inadequate input validation, allowing an attacker to manipulate file paths and include arbitrary files.
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: php
Productos y versiones afectados
gregwar/rst Packagist
- Versiones
- v1.0.0
- v1.0.1
- v1.0.2
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.3
Actualiza a 1.0.3
Fuentes originales
- https://github.com/Gregwar/RST/pull/34
- https://github.com/Gregwar/RST/commit/e8d90ccbeddd91ba3abc506079661dce234f9870
- https://hackerone.com/reports/179034
- https://github.com/FriendsOfPHP/security-advisories/blob/master/gregwar/rst/2016-10-31.yaml
- https://github.com/Gregwar/RST
- https://osv.dev/vulnerability/GHSA-2gq2-m628-33xp