Description

Restler is a simple and effective multi-format Web API Server to host your PHP API as Pragmatic REST and / or RESTful API.

The Typo3 Restler extension version 1.7.0 (and earlier versions) suffers from a local file disclosure vulnerability that allows an attacker to read arbitrary system files.

Remediation

Upgrade to the latest version of Typo3 Restler extension.

References

Typo3 Restler 1.7.0 Local File Disclosure

Restler

Related Vulnerabilities

spring-boot-actuator-logview Path Traversal

WordPress Plugin jRSS Widget 'url' Parameter Directory Traversal (1.1.1)

WordPress Plugin Image Optimizer by 10web-Image Optimizer and Compression Multiple Vulnerabilities (1.0.26)

WordPress Plugin Mail Masta Local File Inclusion (1.0)

ColdFusion directory traversal

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Directory Traversal File Inclusion