CVE-2026-21857

Katalog CVE

CVSS 6.5 · Medium EPSS 0,53%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada redaxo. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

REDAXO is a PHP-based content management system. Prior to version 5.20.2, authenticated users with backup permissions can read arbitrary files within the webroot via path traversal in the Backup addon's file export functionality. The Backup addon does not validate the `EXPDIR` POST parameter against the UI-generated allowlist of permitted directories. An attacker can supply relative paths containing `../` sequences (or even absolute paths inside the document root) to include any readable file in the generated `.tar.gz` archive. Version 5.20.2 fixes this issue.

Rincian

Terbit di NVD

7 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-24: Path Traversal: '../filedir'

EPSS (30 hari)

0,53% peluang dieksploitasi; lebih tinggi dari 43,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/redaxo/redaxo/security/advisories/GHSA-824x-88xg-cwrv exploit · advisory vendor
• https://github.com/redaxo/redaxo/releases/tag/5.20.2 release notes