Fabrikar com_fabrik 3.9.11 onAjax_files folder path traversal

Summaryinfo

A vulnerability, which was classified as critical, has been found in Fabrikar com_fabrik 3.9.11. This vulnerability affects the function onAjax_files. This manipulation of the argument folder causes path traversal. This vulnerability appears as CVE-2020-37219. The attack may be initiated remotely. In addition, an exploit is available.

Detailsinfo

A vulnerability was found in Fabrikar com_fabrik 3.9.11. It has been declared as critical. Affected by this vulnerability is the function onAjax_files. The manipulation of the argument folder with an unknown input leads to a path traversal vulnerability. The CWE definition for the vulnerability is CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. As an impact it is known to affect confidentiality. The summary by CVE is:

Joomla com_fabrik 3.9.11 contains a directory traversal vulnerability that allows unauthenticated attackers to list arbitrary files by manipulating the folder parameter. Attackers can send GET requests to the onAjax_files method with path traversal sequences to enumerate files in system directories outside the intended web root.

The weakness was presented by qw3rTyTy as 48263. The advisory is shared at exploit-db.com. This vulnerability is known as CVE-2020-37219 since 05/13/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details and also a public exploit are known. MITRE ATT&CK project uses the attack technique T1006 for this issue.

It is possible to download the exploit at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Fabrikar

Name

• com_fabrik

Version

• 3.9.11

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion