GHSA-2gq2-m628-33xp
GHSA-2gq2-m628-33xp · gregwar/rst Local File Inclusion Vulnerability
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
A Local File Inclusion (LFI) vulnerability has been discovered in the gregwar/rst library, potentially exposing sensitive files on the server to unauthorized users. The issue arises from inadequate input validation, allowing an attacker to manipulate file paths and include arbitrary files.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: php
Produits et versions concernés
gregwar/rst Packagist
- Versions du logiciel
- v1.0.0
- v1.0.1
- v1.0.2
- Plages de versions concernées
- ECOSYSTEM: < 1.0.3
Mettez à jour vers 1.0.3
Sources originales
- https://github.com/Gregwar/RST/pull/34
- https://github.com/Gregwar/RST/commit/e8d90ccbeddd91ba3abc506079661dce234f9870
- https://hackerone.com/reports/179034
- https://github.com/FriendsOfPHP/security-advisories/blob/master/gregwar/rst/2016-10-31.yaml
- https://github.com/Gregwar/RST
- https://osv.dev/vulnerability/GHSA-2gq2-m628-33xp