CVE-2008-4129

Gallery < 1.5.9 and 2.x < 2.2.6 - Authenticated Path Traversal via ZIP Archive Upload

Title source: llm

Description

Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing symbolic links, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files via vectors related to the archive upload (aka zip upload) functionality.

References (10)

Core 10

Core References

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-200811-02.xml

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/33144

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/45228

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31912

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32662

Vendor Advisory vendor-advisory x_refsource_fedora

https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00832.html

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/31231

Patch x_refsource_confirm

http://gallery.menalto.com/gallery_2.2.6_released

Patch x_refsource_confirm

http://gallery.menalto.com/gallery_1.5.9_released

Vendor Advisory vendor-advisory x_refsource_fedora

https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00794.html

Scores

EPSS 0.0177

EPSS Percentile 75.5%

Details

CWE

CWE-22

Status published

Products (6)

gallery/gallery 2.2.0

gallery/gallery 2.2.1

gallery/gallery 2.2.2

gallery/gallery 2.2.3

gallery/gallery 2.2.4

gallery/gallery < 2.2.5

Published Sep 18, 2008

Tracked Since Feb 18, 2026