The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form handler, and use parts of the user-controlled filename in the output path, are susceptible to directory traversal

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows,     when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web     applications that use the file upload form handler, and use parts of the user-controlled filename in the     output path, are susceptible to directory traversal (CVE-2020-27304)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the falco package has been released.

The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form handler, and use parts of the user-controlled filename in the output path, are susceptible to directory traversal.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1424-1 advisory.

  - The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows,     when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web     applications that use the file upload form handler, and use parts of the user-controlled filename in the     output path, are susceptible to directory traversal (CVE-2020-27304)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
223536	Linux Distros Unpatched Vulnerability : CVE-2020-27304	Nessus	Misc.	critical
203833	Photon OS 3.0: Falco PHSA-2023-3.0-0599	Nessus	PhotonOS Local Security Checks	critical
203207	Photon OS 4.0: Falco PHSA-2023-4.0-0410	Nessus	PhotonOS Local Security Checks	critical
501887	Siemens SCALANCE LPE9403 Path Traversal (CVE-2020-27304)	Tenable OT Security	Tenable.ot	critical
154757	openSUSE 15 Security Update : civetweb (openSUSE-SU-2021:1424-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2020-27304

critical

Tenable Plugins

critical

critical

critical

critical

critical