| Title | westboy CicadasCMS 2431154dac8d0735e04f1fd2a3c3556668fc8dab Path Traversal |
|---|
| Description | The CicadasCMS backend template management read endpoint /system/cms/template/input (mapped to TemplateController.input → findByPath) directly uses the filePath HTTP parameter in new File(path) to read a file and render its contents into the editor's content textarea. Due to the lack of path validation, this results in an arbitrary file read vulnerability, allowing access to sensitive files such as /etc/passwd, /proc/self/cmdline, /proc/self/environ (which leaks database passwords), and /proc/self/mountinfo. |
|---|
| Source | ⚠️ https://github.com/wawyw/cve_report/blob/main/CicadasCMS_2.md |
|---|
| User | wenyouwen (UID 99589) |
|---|
| Submission | 09/04/2026 14:42 (2 months ago) |
|---|
| Moderation | 10/11/2026 11:00 (1 month later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 416570 [westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab Template Management input TemplateController.input filePath path traversal] |
|---|
| Points | 20 |
|---|