| 제목 | westboy CicadasCMS 2431154dac8d0735e04f1fd2a3c3556668fc8dab Path Traversal |
|---|
| 설명 | The CicadasCMS backend template management read endpoint /system/cms/template/input (mapped to TemplateController.input → findByPath) directly uses the filePath HTTP parameter in new File(path) to read a file and render its contents into the editor's content textarea. Due to the lack of path validation, this results in an arbitrary file read vulnerability, allowing access to sensitive files such as /etc/passwd, /proc/self/cmdline, /proc/self/environ (which leaks database passwords), and /proc/self/mountinfo. |
|---|
| 원천 | ⚠️ https://github.com/wawyw/cve_report/blob/main/CicadasCMS_2.md |
|---|
| 사용자 | wenyouwen (UID 99589) |
|---|
| 제출 | 2026. 09. 04. PM 02:42 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 10. 11. AM 11:00 (1 month later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 416570 [westboy CicadasCMS 까지 2431154dac8d0735e04f1fd2a3c3556668fc8dab Template Management input TemplateController.input filePath 디렉토리 순회] |
|---|
| 포인트들 | 20 |
|---|