CVE-2015-4632 Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a....
HighCVSS 7.5
EPSS 51.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the template_path parameter to (1) svc/virtualshelves/search or (2) svc/members/search.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| koha | >= 3.14.00, < 3.14.16 | 3.14.16 |
| koha | >= 3.16.00, < 3.16.12 | 3.16.12 |
| koha | >= 3.18.00, < 3.18.08 | 3.18.08 |
| koha | >= 3.20.00, < 3.20.01 | 3.20.01 |
References
- bugs.koha-community.org issue-tracking patch third-party-advisory
- koha-community.org release-notes
- koha-community.org release-notes
- koha-community.org release-notes
- koha-community.org release-notes
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20150625 SBA Research Vulnerability Disclosure - Multiple Critical Vulnerabilities in Koha ILS mailing-list third-party-advisory
- 37388 exploit third-party-advisory vdb-entry
- www.sba-research.org release-notes third-party-advisory