github.com
https://github.com/mkdocs/mkdocs CVE-2021-40978
Nuclei
Directory traversal in mkdocs
Record summary
EIP currently links 1 repository PoC and 1 Nuclei template to CVE-2021-40978.
Description
The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601.] and https://github.com/nisdn/CVE-2021-40978/issues/1
Description source: CVE List
Exploitation context
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
mkdocsBrowse PyPI / mkdocs | GitHub Advisory | 1.2.2 | affected |
| 1.2.2 to < 1.2.3 · Fixed in 1.2.3 | affected |
Proofs of concept
1Repository PoCs
GitHubnisdn/CVE-2021-40978Repository PoCby nisdnStars: 2Not analyzed1 file
Nuclei templates
1ProjectDiscoveryHIGHMKdocs 1.2.2 - Directory TraversalCVSS 7.5
The MKdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Note the vendor has disputed the vulnerability (see references) because the dev server must be used in an unsafe way (namely public) to have this vulnerability exploited.
Impact
An attacker can read or modify sensitive files on the server, potentially leading to unauthorized access, data leakage, or system compromise.
Remediation
Upgrade MKdocs to version 1.2.3 or later to fix the directory traversal vulnerability.
WeaknessesCWE-22
Authorspikpikcu
Template tagscve2021cvemkdocslfivuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:mkdocs:mkdocs:1.2.2:*:*:*:*:*:*:*
https://github.com/mkdocs/mkdocs/pull/2604 https://github.com/nisdn/CVE-2021-40978 https://nvd.nist.gov/vuln/detail/CVE-2021-40978 https://github.com/mkdocs/mkdocs https://github.com/mkdocs/mkdocs/issues/2601
Source: ProjectDiscovery
References
10github.com
https://github.com/mkdocs/mkdocs/commit/1b15412f4caae476c262210315fd068d0521a833 github.com
https://github.com/mkdocs/mkdocs/commit/57540911a0d632674dd23edec765189f96f84f6b github.com
https://github.com/mkdocs/mkdocs/issues/2601 github.com
https://github.com/mkdocs/mkdocs/pull/2604 github.com
https://github.com/mkdocs/mkdocs/releases/tag/1.2.3 github.com
https://github.com/nisdn/CVE-2021-40978 github.com
https://github.com/nisdn/CVE-2021-40978/issues/1 github.com
https://github.com/pypa/advisory-database/tree/main/vulns/mkdocs/PYSEC-2021-878.yaml nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-40978