Skip to main content

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2024-51998

High
8.6/10

Summary

The changedetection.io is a free open source web page change detection tool. The validation for the file "URI" scheme falls short, and results in an attacker being able to read any file on the system. This issue only affects instances with a "webdriver" enabled, and "ALLOW_FILE_URI" false or not defined. The check used for "URL" protocol, "is_safe_url", allows "file:" as a "URL" scheme. It later checks if local files are permitted, but one of the preconditions for the check is that the "URL" starts with "file://". The issue comes with the fact that the file "URI" scheme is not required to have double slashes. All users are advised to upgrade. There are no known workarounds for this vulnerability. This issue affects changedetection.io versions prior to 0.47.6.

  • LOW
  • NETWORK
  • NONE
  • CHANGED
  • NONE
  • NONE
  • HIGH
  • NONE

CWE-22 - Path Traversal

Path traversal (or directory traversal), is a vulnerability that allows malicious users to traverse the server's root directory, gaining access to arbitrary files and folders such as application code & data, back-end credentials, and sensitive operating system files. In the worst-case scenario, an attacker could potentially execute arbitrary files on the server, resulting in a denial of service attack. Such an exploit may severely impact the integrity, confidentiality, and availability of an application.

References

Advisory Timeline

  • Published