CVE-2008-1231: Path Traversal
Published Mar 10, 2008
·Updated
Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local .jsp files, and obtain sensitive information, via a .. (dot dot) in the editor parameter.
Affected Software
3 affected components
JSPWiki JSPWiki=2.5.139_beta
JSPWiki JSPWiki=2.4.104
JSPWiki JSPWiki=2.5.139
Event History
Mar 10, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1231?
CVE-2008-1231 is considered high severity due to its potential to allow remote code execution.
2
How do I fix CVE-2008-1231?
To fix CVE-2008-1231, upgrade JSPWiki to version 2.5.140 or later where the vulnerability is patched.
3
What systems are affected by CVE-2008-1231?
JSPWiki versions 2.4.104 and 2.5.139, including the beta version, are affected by CVE-2008-1231.
4
Can CVE-2008-1231 lead to data leakage?
Yes, CVE-2008-1231 can be exploited to access sensitive information from the server.
5
Is there a workaround for CVE-2008-1231 if I cannot upgrade?
A temporary workaround is to restrict access to the Edit.jsp file or validate user input to prevent directory traversal.