| عنوان | westboy CicadasCMS 2431154dac8d0735e04f1fd2a3c3556668fc8dab Path Traversal |
|---|
| الوصف | The CicadasCMS backend template management read endpoint /system/cms/template/input (mapped to TemplateController.input → findByPath) directly uses the filePath HTTP parameter in new File(path) to read a file and render its contents into the editor's content textarea. Due to the lack of path validation, this results in an arbitrary file read vulnerability, allowing access to sensitive files such as /etc/passwd, /proc/self/cmdline, /proc/self/environ (which leaks database passwords), and /proc/self/mountinfo. |
|---|
| المصدر | ⚠️ https://github.com/wawyw/cve_report/blob/main/CicadasCMS_2.md |
|---|
| المستخدم | wenyouwen (UID 99589) |
|---|
| ارسال | 04/09/2026 02:42 PM (2 أشهر منذ) |
|---|
| الاعتدال | 11/10/2026 11:00 AM (1 month later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 416570 [westboy CicadasCMS حتى 2431154dac8d0735e04f1fd2a3c3556668fc8dab Template Management input TemplateController.input filePath اجتياز الدليل] |
|---|
| النقاط | 20 |
|---|