Pterodactyl Wings link following

Summaryinfo

A vulnerability was found in Pterodactyl Wings and classified as critical. This affects an unknown function. Such manipulation leads to link following. This vulnerability is listed as CVE-2023-25152. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Pterodactyl Wings (the affected version is unknown). Affected by this issue is an unknown code. The manipulation with an unknown input leads to a link following vulnerability. Using CWE to declare the problem leads to CWE-59. The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. Impacted is confidentiality, integrity, and availability. CVE summarizes:

Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to create new files and directory structures on the host system that previously did not exist, potentially allowing attackers to change their resource allocations, promote their containers to privileged mode, or potentially add ssh authorized keys to allow the attacker access to a remote shell on the target machine. In order to use this exploit, an attacker must have an existing "server" allocated and controlled by the Wings Daemon. This vulnerability has been resolved in version `v1.11.3` of the Wings Daemon, and has been back-ported to the 1.7 release series in `v1.7.3`. Anyone running `v1.11.x` should upgrade to `v1.11.3` and anyone running `v1.7.x` should upgrade to `v1.7.3`. There are no known workarounds for this vulnerability. ### Workarounds None at this time.

The weakness was presented 02/08/2023 as GHSA-p8r3-83r8-jwj5. The advisory is shared for download at github.com. This vulnerability is handled as CVE-2023-25152 since 02/03/2023. There are neither technical details nor an exploit publicly available.

Upgrading eliminates this vulnerability. Applying the patch dac9685298c3c1c49b3109fa4241aa88272b9f14 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Pterodactyl

Name

• Wings

License

• open-source

Website

• Product: https://github.com/pterodactyl/wings/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion