CVE-2019-0225

A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details.

CVSS v3 7.5 HIGH
CVSS v2.0 7.8 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.openwall.com/lists/oss-security/2019/03/26/2	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/107627	Third Party Advisory VDB Entry
https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-0225	Vendor Advisory
https://lists.apache.org/thread.html/03ddbcb1d6322e04734e65805a147a32bcfdb71b8fc5821fb046ba8d%40%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/4f19fdbd8b9c4caf6137a459d723f4ec60379b033ed69277eb4e0af9%40%3Cuser.jspwiki.apache.org%3E
https://lists.apache.org/thread.html/6251c06cb11e0b495066be73856592dbd7ed712487ef283d10972831%40%3Cdev.jspwiki.apache.org%3E
https://lists.apache.org/thread.html/aac253cfc33c0429b528e2fcbe82d3a42d742083c528f58d192dfd16%40%3Ccommits.jspwiki.apache.org%3E
https://lists.apache.org/thread.html/e42d6e93384d4a33e939989cd00ea2a06ccf1e7bb1e6bdd3bf5187c1%40%3Ccommits.jspwiki.apache.org%3E

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:apache:jspwiki::::::::
	cpe:2.3:a:apache:jspwiki:2.11.0:-::::::
	cpe:2.3:a:apache:jspwiki:2.11.0:milestone1-rc1::::::
	cpe:2.3:a:apache:jspwiki:2.11.0:milestone1-rc2::::::
	cpe:2.3:a:apache:jspwiki:2.11.0:milestone1-rc3::::::
	cpe:2.3:a:apache:jspwiki:2.11.0:milestone2::::::
	cpe:2.3:a:apache:jspwiki:2.11.0:milestone2-rc1::::::

History

No history.

Information

Published : 2019-03-28 22:29

Updated : 2024-02-04 20:20

NVD link : CVE-2019-0225

Mitre link : CVE-2019-0225

CVE.ORG link : CVE-2019-0225

JSON object : View

Products Affected

apache

jspwiki

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2019-0225", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2019-03-28T22:29:00.683", "references": [{"url": "http://www.openwall.com/lists/oss-security/2019/03/26/2", "tags": ["Mailing List", "Third Party Advisory"], "source": "security@apache.org"}, {"url": "http://www.securityfocus.com/bid/107627", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security@apache.org"}, {"url": "https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-0225", "tags": ["Vendor Advisory"], "source": "security@apache.org"}, {"url": "https://lists.apache.org/thread.html/03ddbcb1d6322e04734e65805a147a32bcfdb71b8fc5821fb046ba8d%40%3Cannounce.apache.org%3E", "source": "security@apache.org"}, {"url": "https://lists.apache.org/thread.html/4f19fdbd8b9c4caf6137a459d723f4ec60379b033ed69277eb4e0af9%40%3Cuser.jspwiki.apache.org%3E", "source": "security@apache.org"}, {"url": "https://lists.apache.org/thread.html/6251c06cb11e0b495066be73856592dbd7ed712487ef283d10972831%40%3Cdev.jspwiki.apache.org%3E", "source": "security@apache.org"}, {"url": "https://lists.apache.org/thread.html/aac253cfc33c0429b528e2fcbe82d3a42d742083c528f58d192dfd16%40%3Ccommits.jspwiki.apache.org%3E", "source": "security@apache.org"}, {"url": "https://lists.apache.org/thread.html/e42d6e93384d4a33e939989cd00ea2a06ccf1e7bb1e6bdd3bf5187c1%40%3Ccommits.jspwiki.apache.org%3E", "source": "security@apache.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details."}, {"lang": "es", "value": "Una URL especialmente manipulada podr\u00eda utilizarse para acceder a archivos en el directorio ROOT de la aplicaci\u00f3n de Apache JSPWiki, desde la versi\u00f3n 2.9.0 hasta la 2.11.0.M2, lo que podr\u00eda ser utilizado por un atacante para obtener los detalles de los usuarios registrados."}], "lastModified": "2023-11-07T03:01:52.603", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:jspwiki:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E36A808E-4950-42D9-92AF-8E64F2E02F36", "versionEndExcluding": "2.11.0", "versionStartIncluding": "2.9.0"}, {"criteria": "cpe:2.3:a:apache:jspwiki:2.11.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E13B516A-8D6B-4B6C-882E-A282CFE0E587"}, {"criteria": "cpe:2.3:a:apache:jspwiki:2.11.0:milestone1-rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B85C9FA6-A699-48DE-A2DA-52363B21C319"}, {"criteria": "cpe:2.3:a:apache:jspwiki:2.11.0:milestone1-rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66D0D950-02DD-4D47-ADA6-F030E3A38584"}, {"criteria": "cpe:2.3:a:apache:jspwiki:2.11.0:milestone1-rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA52AF2B-E714-4769-A9D4-DB46C1ACFFA5"}, {"criteria": "cpe:2.3:a:apache:jspwiki:2.11.0:milestone2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F88F497A-C3A3-4363-BBFA-249C465DD6CD"}, {"criteria": "cpe:2.3:a:apache:jspwiki:2.11.0:milestone2-rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A2FEDF8-A4F7-42B6-BC4C-60CC1F08845A"}], "operator": "OR"}]}], "sourceIdentifier": "security@apache.org"}