FileZen up to 3.x/4.2.1 File Upload path traversal

Summaryinfo

A vulnerability, which was classified as critical, has been found in FileZen up to 3.x/4.2.1. This issue affects some unknown processing of the component File Upload. The manipulation leads to path traversal. This vulnerability is documented as CVE-2018-0693. The attack can be initiated remotely. There is not any exploit available.

Detailsinfo

A vulnerability, which was classified as critical, has been found in FileZen up to 3.x/4.2.1. This issue affects an unknown functionality of the component File Upload. The manipulation with an unknown input leads to a path traversal vulnerability. Using CWE to declare the problem leads to CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. Impacted is integrity, and availability. The summary by CVE is:

Directory traversal vulnerability in FileZen V3.0.0 to V4.2.1 allows remote attackers to upload an arbtrary file in the specific directory in FileZen via unspecified vectors.

The bug was discovered 10/15/2018. The weakness was released 11/15/2018 (Website). It is possible to read the advisory at jvn.jp. The identification of this vulnerability is CVE-2018-0693 since 11/27/2017. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1006 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 31 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Entry connected to this vulnerability is available at VDB-126912. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Name

• FileZen

Version

• 3.x
• 4.2.0
• 4.2.1

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion