CVE-2017-9067: MODX Revolution Directory Traversal Vulnerability
Summary
CVE-2017-9067: MODX Revolution Directory Traversal Vulnerability. Affects modx/revolution versions < 2.5.7. Fixed in 2.5.7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MODX Revolution is a popular open-source content management system (CMS) that allows users to create and manage websites with ease. It offers a flexible architecture, enabling developers to customize and extend its functionality. However, prior to version 2.5.7, MODX Revolution was vulnerable to a directory traversal issue that could allow unauthorized file access and execution on the web server.
Vulnerability Detail
In MODX Revolution versions before 2.5.7, when running on PHP 5.3.3, an attacker could exploit insufficient validation of the 'action' parameter in the setup/index.php file. This vulnerability allows attackers to include and execute arbitrary files on the web server, potentially leading to unauthorized access to sensitive data or complete server compromise.
How To Fix
Minimum fixed version
2.5.7
This is the first release that contains the fix.
composer require modx/revolution:2.5.7Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the setup/index.php file by modifying your web server configuration to deny requests to this file. For example, in an Apache configuration, you can add the following directive: <Directory /path/to/modx/setup> Deny from all </Directory>
Conclusion
The MODX Revolution directory traversal vulnerability (CVE-2017-9067) poses a significant risk to users of versions prior to 2.5.7. It is crucial to update to the latest version to protect against potential exploitation. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for modx/revolution →
FAQ
A directory traversal vulnerability allows an attacker to access files and directories that are stored outside the web root directory, potentially leading to unauthorized access to sensitive information.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your composer.lock file, Vulert can alert you in real-time if your application is affected by this vulnerability.
Exploitation of this vulnerability can lead to unauthorized file access, execution of malicious scripts, and potential full server compromise, putting sensitive data at risk.
Yes, you can temporarily restrict access to the vulnerable setup/index.php file through server configuration changes, but updating to the patched version is the best long-term solution.
The CVSS score for this vulnerability is 7.0, indicating a high severity level that requires immediate attention.
References
Related vulnerabilities
Recent vulnerabilities recorded for modx/revolution.
