CVE-2023-40274: zola Path Traversal vulnerability

August 14, 2023 (updated August 22, 2023)

An issue was discovered in zola 0.13.0 through 0.17.2. The custom implementation of a web server, available via the “zola serve” command, allows directory traversal. The handle_request function, used by the server to process HTTP requests, does not account for sequences of special path control characters (../) in the URL when serving a file, which allows one to escape the webroot of the server and read arbitrary files from the filesystem.

References

github.com/advisories/GHSA-xvv9-5j67-3rpq
github.com/getzola/zola
github.com/getzola/zola/issues/2257
github.com/getzola/zola/pull/2258
nvd.nist.gov/vuln/detail/CVE-2023-40274

Code Behaviors & Features

Detect and mitigate CVE-2023-40274 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →