CVE-2017-10993: Path Traversal
A logged in back end user can include arbitrary existing PHP files by manipulating an URL parameter
Other sources
A logged in back end user can include arbitrary PHP files by manipulating an URL parameter. Since Contao does not allow to upload PHP files in the file manager, the attack is limited to the existing PHP files on the server.
— GitHub
Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka Directory Traversal.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10993?
CVE-2017-10993 has a medium severity rating due to the potential for arbitrary file inclusion by authenticated users.
How do I fix CVE-2017-10993?
To fix CVE-2017-10993, update Contao to version 4.4.1 or higher or to version 3.5.28 or higher.
Who is affected by CVE-2017-10993?
CVE-2017-10993 affects users of Contao versions between 3.0.0 and 4.4.1.
What attack vector does CVE-2017-10993 exploit?
CVE-2017-10993 exploits an URL parameter manipulation vulnerability that allows user-controlled PHP file inclusion.
What are the potential impacts of CVE-2017-10993?
The potential impacts of CVE-2017-10993 include unauthorized access to backend functionality and exposure of sensitive data due to file inclusion.