Path Traversal Vulnerability in Wagtail CRX CodeRed Extensions
Summary
CVE-2021-46897: views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.22.3 allows upward protected/..%2f..%2f path traversal when serving protected media. Affects coderedcms versions < 0.22.3. Fixed in 0.22.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) is an open-source content management system built on top of the Wagtail CMS framework. It provides additional features and extensions for managing and serving content. However, a vulnerability has been discovered in versions prior to 0.22.3 that allows for upward path traversal when serving protected media files.
Vulnerability Detail
The vulnerability in Wagtail CRX CodeRed Extensions allows an attacker to bypass access controls and traverse directories outside of the intended scope. By exploiting this vulnerability, an attacker can access sensitive files and potentially execute arbitrary code. This can lead to unauthorized access, data leakage, and compromise of the affected system.
How To Fix
Minimum fixed version
0.22.3
This is the first release that contains the fix.
pip install --upgrade "coderedcms==0.22.3"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to the patched version.
Conclusion
The path traversal vulnerability in Wagtail CRX CodeRed Extensions can lead to unauthorized access and potential compromise of sensitive files. It is crucial to upgrade to version 0.22.3 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for coderedcms →
FAQ
This vulnerability allows an attacker to access protected media files outside of the intended scope, potentially leading to unauthorized access and data leakage.
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply input your Pipfile.lock file, and Vulert will provide real-time alerts for any open-source vulnerabilities, including this one.
While there is no known public exploit at the time of this advisory, it is crucial to apply the recommended fix to mitigate the risk of exploitation.
Unfortunately, there are no known mitigations for this vulnerability other than upgrading to the patched version. It is highly recommended to prioritize the upgrade process to ensure the security of your system.
You can find more information about this vulnerability, including the technical details and the patch, in the advisory on the PyPI Advisory Database: https://github.com/pypa/advisory-database/blob/main/vulns/coderedcms/PYSEC-2023-210.yaml
References
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.