Description

Acunetix uploaded a ZIP file containing a symlink to /etc/passwd. It looks like that web application processed this file and returned the contents of /etc/passwd in response.

Remediation

The web application should filter symlinks included inside ZIP files.

References

Reading local files from Facebook's server

Related Vulnerabilities

WordPress Plugin IP Blacklist Cloud Arbitrary File Disclosure (3.42)

WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.9)

WordPress Plugin WP Activity Log Information Disclosure (3.1.1)

WordPress Plugin Thumbnail carousel slider Arbitrary File Upload (1.0)

WordPress Plugin NextGEN Gallery-WordPress Gallery Arbitrary File Upload (2.1.10)

Severity

High

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Unauthenticated File Upload Information Disclosure