The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form handler, and use parts of the user-controlled filename in the output path, are susceptible to directory traversal

An update of the falco package has been released.

The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form handler, and use parts of the user-controlled filename in the output path, are susceptible to directory traversal.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1424-1 advisory.

  - The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows,     when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web     applications that use the file upload form handler, and use parts of the user-controlled filename in the     output path, are susceptible to directory traversal (CVE-2020-27304)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
203833	Photon OS 3.0: Falco PHSA-2023-3.0-0599	Nessus	PhotonOS Local Security Checks	critical
203207	Photon OS 4.0: Falco PHSA-2023-4.0-0410	Nessus	PhotonOS Local Security Checks	critical
501887	Siemens SCALANCE LPE9403 Path Traversal (CVE-2020-27304)	Tenable OT Security	Tenable.ot	critical
154757	openSUSE 15 Security Update : civetweb (openSUSE-SU-2021:1424-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2020-27304

critical

Tenable Plugins

critical

critical

critical

critical