Published: 26/02/2018 Updated: 23/03/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

uWSGI prior to 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

Vulnerable Product	Search on Vulmon	Subscribe to Product
unbit uwsgi
debian debian linux 8.0
debian debian linux 9.0

Debian Bug report logs - #891639 uwsgi: CVE-2018-7490: Mishandled DOCUMENT_ROOT check with use of --php-docroot option allows for directory traversal Package: src:uwsgi; Maintainer for src:uwsgi is uWSGI packaging team <pkg-uwsgi-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Dat ...

Debian Bug report logs - #889753 uwsgi: CVE-2018-6758: stack-based buffer overflow within uwsgi_expand_path Package: src:uwsgi; Maintainer for src:uwsgi is uWSGI packaging team <pkg-uwsgi-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 6 Feb 2018 19:48:05 UTC Severity ...

Marios Nicolaides discovered that the PHP plugin in uWSGI, a fast, self-healing application container server, does not properly handle a DOCUMENT_ROOT check during use of the --php-docroot option, allowing a remote attacker to mount a directory traversal attack and gain unauthorized read access to sensitive files located outside of the web root dir ...

# Exploit Title: uWSGI PHP Plugin Directory Traversal # Date: 01-03-2018 # Exploit Author: Marios Nicolaides - RUNESEC # Reviewers: Simon Loizides and Nicolas Markitanis - RUNESEC # Vendor Homepage: uwsgi-docsreadthedocsio # Affected Software: uWSGI PHP Plugin before 2017 # Tested on: uWSGI 2012 and 2015 # CVE: CVE-2018-7490 # Categ ...

uWSGI versions prior to 2017 suffer from a directory traversal vulnerability ...

uWSGI PHP Directory Traversal Vulnerability (CVE-2018-7490) 中文版本(Chinese version) uWSGI is a web application server, which implements protocols such as WSGI/uwsgi/http, and supports for various languages through plugins The PHP plugin of uWSGI before 2017 doesn't handle the detection of DOCUMENT_ROOT correctly, resulting in reading or running files outside the D

CWE-22 https://uwsgi-docs.readthedocs.io/en/latest/Changelog-2.0.17.html https://www.exploit-db.com/exploits/44223/https://www.debian.org/security/2018/dsa-4142 https://nvd.nist.gov https://github.com/cyberharsh/uwsgi https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891639 https://www.exploit-db.com/exploits/44223/https://www.debian.org/security/./dsa-4142

CVE-2018-7490

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect