CVE-2017-9067: Path Traversal
First published: Thu May 18 2017(Updated: )
In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/index.php, aka directory traversal.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| MODx Revolution | =2.5.6 | |
| PHP | =5.3.3 | |
| composer/modx/revolution | <2.5.7 | 2.5.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://citadelo.com/en/2017/04/modx-revolution-cms/
- https://github.com/modxcms/revolution/pull/13428
- https://github.com/modxcms/revolution/pull/13422
- https://nvd.nist.gov/vuln/detail/CVE-2017-9067
- https://citadelo.com/en/2017/04/modx-revolution-cms
- https://github.com/advisories/GHSA-cgrv-6h2h-6f7v (Advisory)
Frequently Asked Questions
What is the severity of CVE-2017-9067?
CVE-2017-9067 is considered a critical vulnerability as it allows attackers to execute arbitrary files on the web server.
How do I fix CVE-2017-9067?
To fix CVE-2017-9067, upgrade MODX Revolution to version 2.5.7 or later and ensure PHP is not at version 5.3.3.
What systems are affected by CVE-2017-9067?
CVE-2017-9067 affects MODX Revolution versions up to 2.5.6 when running on PHP version 5.3.3.
What type of attack can be executed using CVE-2017-9067?
An attacker can perform directory traversal attacks to include and execute arbitrary files on the server.
Is CVE-2017-9067 still a threat if I have updated my software?
If you have updated MODX Revolution to version 2.5.7 or higher and are using a secure PHP version, then CVE-2017-9067 should no longer pose a threat.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/first-publish-date
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-cgrv-6h2h-6f7v
- alias/CVE-2017-9067
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/event
- collector/nvd-cve
- source/NVD
- agent/source
- agent/tags
- collector/github-advisory
- vendor/modx
- canonical/modx revolution
- version/modx revolution/2.5.6
- vendor/php
- canonical/php
- version/php/5.3.3
- package-manager/composer