Executive brief
jqueryFileTree is a jQuery-based file browser plugin used in web applications to display directory listings and allow users to navigate files. The vulnerability allows unauthenticated attackers to bypass path restrictions and access arbitrary files and directories on the server, potentially exposing sensitive data or system files.
Technical details
The vulnerability is a directory traversal flaw (CWE-22) in the jqueryFileTree.php connector file that fails to properly validate or sanitize the "dir" parameter. An unauthenticated attacker can send a POST request with crafted directory traversal sequences (e.g., dir=/) to the connector endpoint, allowing navigation outside the intended file root. The attack requires network access to the vulnerable connector script and no authentication. An attacker can enumerate and potentially read arbitrary files accessible to the web server process. The vulnerability affects version 2.1.5 and earlier; the project was archived in February 2021, indicating no ongoing support.
Affected products
- jqueryFileTree jqueryFileTree 2.1.5 and earlier
Timeline
- 2017-05-09: disclosed: Security issue reported on GitHub
- 2017-11-17: advisory: CVE-2017-1000170 published on NVD
- 2021-02-10: other: Project archived and no longer maintained