Directory Traversal Vulnerability in Suricata by Open Information Security Foundation

CVE-2023-35852

What is CVE-2023-35852?

A directory traversal vulnerability exists in Suricata prior to version 6.0.13, whereby a malformed dataset filename sourced from malicious rules can potentially allow an adversary to manipulate file paths, leading to unauthorized access and write privileges on the local filesystem. This security flaw is addressed in version 6.0.13, which mandates specific configurations—namely, 'allow-absolute-filenames' and 'allow-write'—when installations require such traversal or writing capabilities. It's crucial for users to update their Suricata installation to mitigate risks associated with this vulnerability.

References