Description
When a web server fails to properly normalize and validate the ../ sequence in URL paths, it enables attackers to access files outside the intended directory structure. This vulnerability can lead to reading sensitive system files such as /etc/passwd or application configuration files. The issue may arise due to bugs in the web server or the router application responsible for serving static files.
Recommendation
To mitigate this risk:
- Ensure the web server and any components used for serving static files are kept up to date to patch known vulnerabilities.
- Implement proper validation and sanitization mechanisms in your web application to prevent serving files outside of the intended path.
- Conduct thorough debugging and tracing of your web application’s route dispatching to identify and rectify potential vulnerabilities.
References
Could your website be exposed too?
SmartScanner can check your website for Web Server Path Traversal and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Apache 2.4.49 Path Traversal and RCE - CVE-2021-41773, CVE-2021-42013
- Saltcorn Server allows logged-in users to delete arbitrary files because of a path traversal vulnerability - CVE-2024-47818
- Path traversal - CVE-2021-32662
- Tina: Path Traversal in Media Upload Handle - CVE-2026-28791
You might also like:
See something that needs correcting? Let us knowUpdated May 13, 2024