CVE-2019-20354
MEDIUMpiSignage < 2.6.4 - Authenticated Path Traversal via Log Download API
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-20354. PoCs published by JunYeong Ko.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in piSignage before 2.6.4, allowing authenticated low-privilege users to download arbitrary files via a manipulated 'file' parameter in the API endpoint 'api/settings/log'. The PoC shows how to read '/etc/passwd' by traversing directories.
Description
The web application component of piSignage before 2.6.4 allows a remote attacker (authenticated as a low-privilege user) to download arbitrary files from the Raspberry Pi via api/settings/log?file=../ path traversal. In other words, this issue is in the player API for log download.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in piSignage before 2.6.4, allowing authenticated low-privilege users to download arbitrary files via a manipulated 'file' parameter in the API endpoint 'api/settings/log'. The PoC shows how to read '/etc/passwd' by traversing directories.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N