Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. (dot dot) in the contentbase parameter to rpc/set_all.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/146938/TwonkyMedia-Server-7.0.11-8.5-Directory-Traversal.html | Exploit Third Party Advisory VDB Entry |
| https://github.com/mechanico/sharingIsCaring/blob/master/twonky.py | Third Party Advisory |
| https://www.exploit-db.com/exploits/44350/ | Exploit Third Party Advisory VDB Entry |
| http://packetstormsecurity.com/files/146938/TwonkyMedia-Server-7.0.11-8.5-Directory-Traversal.html | Exploit Third Party Advisory VDB Entry |
| https://github.com/mechanico/sharingIsCaring/blob/master/twonky.py | Third Party Advisory |
| https://www.exploit-db.com/exploits/44350/ | Exploit Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 04:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/146938/TwonkyMedia-Server-7.0.11-8.5-Directory-Traversal.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () https://github.com/mechanico/sharingIsCaring/blob/master/twonky.py - Third Party Advisory | |
| References | () https://www.exploit-db.com/exploits/44350/ - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2018-03-30 21:29
Updated : 2024-11-21 04:11
NVD link : CVE-2018-7171
Mitre link : CVE-2018-7171
CVE.ORG link : CVE-2018-7171
JSON object : View
Products Affected
lynxtechnology
- twonky_server
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')