CVE-2021-23423: Path Traversal in bikeshed
Summary
CVE-2021-23423: Path Traversal in bikshed. Affects bikeshed versions < 3.0.0. Fixed in 3.0.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Bikeshed is a Python package available on PyPI that provides functionality for generating HTML documentation from ReStructuredText files. It is widely used for generating documentation for software projects. However, versions of bikeshed before 3.0.0 are vulnerable to a path traversal attack. This vulnerability can be exploited when processing an untrusted source file containing an include, include-code, or include-raw block. As a result, the HTML output may disclose the contents of arbitrary files, leading to potential information disclosure.
Vulnerability Detail
The path traversal vulnerability in bikeshed arises due to insufficient input validation when processing include blocks in source files. An attacker can craft a malicious source file that includes sensitive files outside of the intended directory. When the file is processed, the contents of these arbitrary files can be disclosed in the generated HTML output. This can lead to the exposure of sensitive information, such as configuration files or source code, to unauthorized individuals. The vulnerability has a CVSSv3 score of 5.5, indicating a moderate severity level.
How To Fix
Minimum fixed version
3.0.0
This is the first release that contains the fix.
pip install --upgrade "bikeshed==3.0.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to upgrade to the fixed version of bikeshed to mitigate the risk of path traversal attacks.
Conclusion
The path traversal vulnerability in bikeshed can result in the disclosure of sensitive information to unauthorized individuals. To mitigate this risk, it is recommended to upgrade to bikeshed version 3.0.0 or later. This version includes the necessary input validation to prevent path traversal attacks. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for bikeshed →
FAQ
Bikeshed is a Python package used for generating HTML documentation from ReStructuredText files. It is commonly employed in software projects to create documentation.
Path traversal is a vulnerability that allows an attacker to access files or directories outside of the intended scope. In the case of bikeshed, it enables the disclosure of arbitrary files in the generated HTML output.
The vulnerability in bikeshed can lead to the disclosure of sensitive information, such as configuration files or source code, to unauthorized individuals. This can potentially expose critical data and compromise the security of the affected software projects.
To fix this vulnerability, it is recommended to upgrade to bikeshed version 3.0.0 or later. This version includes proper input validation to prevent path traversal attacks. Users can update their bikeshed installation by running the following command: pip install --upgrade bikeshed.
No, there is no known workaround for this vulnerability. It is crucial to upgrade to the fixed version of bikeshed to mitigate the risk of path traversal attacks.
References
Related vulnerabilities
Recent vulnerabilities recorded for bikeshed.
