Directory Traversal Bypass in b2evolution by b2evolution

CVE-2017-5539

What is CVE-2017-5539?

A vulnerability exists in b2evolution, specifically version 6.8.4-stable, where an attacker can exploit a bypass in the patch intended to mitigate directory traversal issues. By leveraging the '../' sequence, an attacker can evade filter restrictions, potentially leading to unauthorized access to sensitive files. This exploitation can allow for file deletion and reading of server files, alongside confirming the existence of specific files on the server.

References