CVE-2017-15363
Last modified
CVE-2017-15363 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter.. EPSS estimates a 13.65% chance of exploitation in the next 30 days.
Description
Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Luracast | Restler | < 1.7.1 |
| Luracast | Restler | < 3.0.0 |
References
- https://extensions.typo3.org/extension/restler/Product, Vendor Advisory
- https://extensions.typo3.org/extension/restler/Product, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-15363?
How severe is CVE-2017-15363?
How do I fix CVE-2017-15363?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-15358Race condition in the Charles Proxy Settings suid binary in …
- CVE-2017-15359In the 3CX Phone System 15.5.3554.1, the Management Console …
- CVE-2017-1536IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8…
- CVE-2017-15360PRTG Network Monitor version 17.3.33.2830 is vulnerable to s…
- CVE-2017-15361The Infineon RSA library 1.02.013 in Infineon Trusted Platfo…
- CVE-2017-15362osTicket 1.10.1 allows arbitrary client-side JavaScript code…
- CVE-2017-15364The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remo…
- CVE-2017-15365sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2…
- CVE-2017-15366Before Thornberry NDoc version 8.0, laptop clients and the s…
- CVE-2017-15367Bacula-web before 8.0.0-rc2 is affected by multiple SQL Inje…
- CVE-2017-15368The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare…
- CVE-2017-15369The build_filter_chain function in pdf/pdf-stream.c in Artif…
Are you affected by CVE-2017-15363?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST