Miggo Logo
Miggo Vulnerability Database
→
CVE-2013-4510

CVE-2013-4510: Tryton Directory Traversal vulnerability

7.5

CVSS Score
3.1

Basic Information

CVE ID
CVE-2013-4510
GHSA ID
GHSA-qjmc-wwmw-cq9r
EPSS Score
0.74572%
CWE
CWE-22
Published
5/17/2022
Updated
11/18/2024
KEV Status
No
Technology
TechnologyPython

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
trytondpip= 3.0.0

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability stems from improper sanitization of the file extension parameter in report handling. The client's report saving function (likely Report.save) constructs filenames using untrusted server-provided extensions containing path separators. This matches the CWE-22 description and advisory details about malicious servers exploiting this via crafted extensions. The function's role in file creation and lack of sanitization directly enable the traversal vulnerability.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

*ir**tory tr*v*rs*l vuln*r**ility in t** *li*nt in Tryton *.*.*, *s *istri*ut** ***or* ******** *n* **rli*r, *llows r*mot* s*rv*rs to writ* *r*itr*ry *il*s vi* p*t* s*p*r*tors in t** *xt*nsion o* * r*port.

Reasoning

T** vuln*r**ility st*ms *rom improp*r s*nitiz*tion o* t** *il* *xt*nsion p*r*m*t*r in r*port **n*lin*. T** *li*nt's r*port s*vin* *un*tion (lik*ly `R*port.s*v*`) *onstru*ts *il*n*m*s usin* untrust** s*rv*r-provi*** *xt*nsions *ont*inin* p*t* s*p*r*to