Within Sahi Pro 8.0.0 Script View Page script path traversal

Summaryinfo

A vulnerability was found in Within Sahi Pro 8.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Script View Page. Executing a manipulation of the argument script as part of Parameter can lead to path traversal. This vulnerability is registered as CVE-2019-13063. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Detailsinfo

A vulnerability classified as critical was found in Within Sahi Pro 8.0.0. This vulnerability affects some unknown processing of the component Script View Page. The manipulation of the argument script as part of a Parameter leads to a path traversal vulnerability. The CWE definition for the vulnerability is CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. As an impact it is known to affect confidentiality. CVE summarizes:

Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page. This will result in file disclosure (i.e., being able to pull any file from the remote victim application). This can be used to steal and obtain sensitive config and other files. This can result in complete compromise of the application. The script parameter is vulnerable to directory traversal and both local and remote file inclusion.

The weakness was published 09/23/2019 as EDB-ID 47062 as not defined exploit (Exploit-DB). The advisory is shared for download at exploit-db.com. This vulnerability was named CVE-2019-13063 since 06/29/2019. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Technical details and also a public exploit are known. The MITRE ATT&CK project declares the attack technique as T1006.

After immediately, there has been an exploit disclosed. It is possible to download the exploit at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Exploit-DB (47062). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Within

Name

• Sahi Pro

Version

• 8.0.0

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion