CVE-2019-16915

Published: Sep 26, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An issue was discovered in pfSense through 2.4.4-p3. widgets/widgets/picture.widget.php uses the widgetkey parameter directly without sanitization (e.g., a basename call) for a pathname to file_get_contents or file_put_contents.

Affected (5)

Products: Netgate: Pfsense

Netgate

1 product

Pfsense

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Netgate Pfsense	Before 2.4.4
Netgate Pfsense	Version 2.4.4
Netgate Pfsense	Version 2.4.4 p1
Netgate Pfsense	Version 2.4.4 p2
Netgate Pfsense	Version 2.4.4 p3

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (6)

https://github.com/pfsense/pfsense/commit/2c544ac61ce98f716d50b8e5961d7dfba66804b5

Source: cve@mitre.org

PatchThird Party Advisory

https://redmine.pfsense.org/issues/9610

Source: cve@mitre.org

Permissions RequiredThird Party Advisory

https://www.seebug.org/vuldb/ssvid-98024

Source: cve@mitre.org

Third Party Advisory

https://github.com/pfsense/pfsense/commit/2c544ac61ce98f716d50b8e5961d7dfba66804b5

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://redmine.pfsense.org/issues/9610

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party Advisory

https://www.seebug.org/vuldb/ssvid-98024

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.