CVE-2020-16136 - In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory traversal ../ sequences in /Administration/Logs/ requests

Back Back to CVE browser

HIGH

In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory traversal ../ sequences in /Administration/Logs/ requests

Published Jul 31, 2020

7.7

HIGH

CVSS 3.1

EPSS 2.06%

Description

In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory traversal ../ sequences in /Administration/Logs/ requests. The attacker is unable to enumerate files, however.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-8102
Advisory
https://github.com/tgstation/tgstation-server
x_refsource_MISCThird Party Advisory
https://github.com/tgstation/tgstation-server/security/advisories/GHSA-r8pp-42wr-2gc4
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-8102		Advisory
https://github.com/tgstation/tgstation-server		x_refsource_MISCThird Party Advisory
https://github.com/tgstation/tgstation-server/security/advisories/GHSA-r8pp-42wr-2gc4		x_refsource_MISCThird Party Advisory