p PatchFirst

CVE-2012-3521

CVE-2012-3521

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.

CVSS 8.7 · High · EPSS 3.2% · Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • geshi Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.0.8.4-2

    Update to 1.0.8.4-2

  • geshi Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.0.8.4-2

    Update to 1.0.8.4-2

  • geshi Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.0.8.4-2

    Update to 1.0.8.4-2

  • geshi/geshi Packagist

    Affected ranges
    • ECOSYSTEM: < 1.0.8.11

    Update to 1.0.8.11

Original sources

Check your server →