GHSA-rvmg-xc29-rvxf
Luracast Restler directory traversal vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | aoe/restler | < 1.7.1 | 1.7.1 |
| Packagist | luracast/restler | < 3.1.0 | 3.1.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter.
References
External links from the advisory. They lead to third-party sites.