AeroCMS v0.0.1 Directory traversal vulnerability

[w4n95]

• Description

---

AeroCMS v0.0.1 was discovered to contain a Directory traversal vulnerability. The vulnerability is due to the failure to normalize the url. This vulnerability allows an attacker to read arbitrary files in the root directory of a website.

• Reproduct

---

1. Access any interfaces of Folder Path，For example, "/includes, /images, /js, /fonts, css, /admin and /admin/*"
   
2. Within Burpsuite, concat multiple "../" in url，that can access any file in the server root directory, include configuration files or other website files