Description
Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | geshi | 1.0.8.4-2 | — |
| Debian 13 | geshi | 1.0.8.4-2 | — |
| Debian 12 | geshi | 1.0.8.4-2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | geshi/geshi | < 1.0.8.11 | 1.0.8.11 | GHSA-fw3x-2pr2-5j64 |
References
- http://sourceforge.net/p/geshi/code/2507/
- FEDORA-2013-5411 vendor-advisory
- FEDORA-2013-5472 vendor-advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=685324
- FEDORA-2013-5440 vendor-advisory
- [oss-security] 20120821 Re: CVE Request -- php-geshi / GeSHi (1.0.8.11): Remote directory traversal and information disclosure in the cssgen contrib module (plus possibly XSS, but it needs upstream to confirm) mailing-list