SB2020100403 - Path traversal in Wiki.js

Description

This security bulletin contains information about 1 vulnerability.

1) Path traversal (CVE-ID: CVE-2020-15236)

The vulnerability allows a remote user to disclose sensitive information.

The vulnerability exists due to path traversal in asset handling with storage modules implementing local asset cache when processing a specially crafted URL. A remote user can craft a special URL to read arbitrary files on the file system and disclose sensitive information.

Exploitation is only possible when a storage module implementing local asset cache is enabled, such as Local File System or Git, and when malicious URLs are not stripped before reaching the application.

Remediation

Install update from vendor's website.

References

• https://github.com/requarks/wiki/security/advisories/GHSA-whpv-5xg2-w527
• https://github.com/advisories/GHSA-whpv-5xg2-w527