CVE-2013-5979: Path Traversal
Published Oct 2, 2013
·Updated
Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter to index.php.
Affected Software
16 affected components
Springsignage Xibo=1.2.0
Springsignage Xibo=1.2.0-rc1
Springsignage Xibo=1.2.0-rc2
Springsignage Xibo=1.2.1
Springsignage Xibo=1.2.2
Springsignage Xibo=1.4.0
Springsignage Xibo=1.4.0-rc1
Springsignage Xibo=1.4.1
Xibosignage Xibo=1.2.0
Xibosignage Xibo=1.2.0-rc1
Xibosignage Xibo=1.2.0-rc2
Xibosignage Xibo=1.2.1
Xibosignage Xibo=1.2.2
Xibosignage Xibo=1.4.0
Xibosignage Xibo=1.4.0-rc1
Xibosignage Xibo=1.4.1
Event History
Oct 2, 2013
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-5979?
CVE-2013-5979 has a medium severity rating as it allows remote attackers to read arbitrary files.
2
How do I fix CVE-2013-5979?
To fix CVE-2013-5979, upgrade Xibo to version 1.2.3 or 1.4.2 or later.
3
What software is affected by CVE-2013-5979?
CVE-2013-5979 affects Xibo versions 1.2.0 to 1.2.2 and 1.4.0 to 1.4.1.
4
What type of vulnerability is CVE-2013-5979?
CVE-2013-5979 is a directory traversal vulnerability.
5
Can CVE-2013-5979 be exploited remotely?
Yes, CVE-2013-5979 can be exploited remotely by attackers to access unauthorized files.