CVE-2018-7171
HIGHTwonky Server 7.0.11-8.5 - Directory Traversal via contentbase Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2018-7171. PoCs published by Sven Fassbender, mechanico.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in TwonkyMedia Server versions 7.0.11-8.5. It allows an attacker to set the 'contentbase' parameter to '/../' via the 'rpc/set_all' endpoint, enabling unauthorized filesystem browsing outside user-specified shares.
Description
Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. (dot dot) in the contentbase parameter to rpc/set_all.
Exploits (2)
This exploit demonstrates a directory traversal vulnerability in TwonkyMedia Server versions 7.0.11-8.5. It allows an attacker to set the 'contentbase' parameter to '/../' via the 'rpc/set_all' endpoint, enabling unauthorized filesystem browsing outside user-specified shares.
This repository contains a proof-of-concept exploit for CVE-2018-7171, a directory traversal vulnerability in TwonkyMedia Server versions 7.0.11-8.5. The exploit allows an attacker to list and download all media files on the device without authentication.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N