CVE-2024-22723 Information

Description

Webtrees 2.1.18 is vulnerable to Directory Traversal. By manipulating the \media_folder\ parameter in the URL an attacker (in this case an administrator) can navigate beyond the intended directory (the ‘media/’ directory) to access sensitive files in other parts of the application’s file system.

Reference

https://cupc4k3.medium.com/cve-2024-22723-webtrees-vulnerability-uncovering-sensitive-data-through-path-traversal-7442e7a38b68