Description
The patch for directory traversal (CVE-2017-5480) in b2evolution version 6.8.4-stable has a bypass vulnerability. An attacker can use ..\/ to bypass the filter rule. Then, this attacker can exploit this vulnerability to delete or read any files on the server. It can also be used to determine whether a file exists.
References (4)
Core 4
Core References
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://github.com/b2evolution/b2evolution/commit/e35f7c195d8c1103d2d981a48cda5ab45ecac48a
Patch, Vendor Advisory x_refsource_confirm
http://b2evolution.net/downloads/6-8-5
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/95700
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://github.com/b2evolution/b2evolution/issues/36
Scores
CVSS v3
9.1
EPSS
0.0745
EPSS Percentile
91.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Details
CWE
CWE-22
Status
published
Products (1)
b2evolution/b2evolution
6.8.4
Published
Jan 23, 2017
Tracked Since
Feb 18, 2026