CVE-2023-6026: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

November 30, 2023 (updated December 6, 2023)

A Path traversal vulnerability has been reported in elijaa/phpmemcachedadmin affecting version 1.3.0. This vulnerability allows an attacker to delete files stored on the server due to lack of proper verification of user-supplied input.

References

nvd.nist.gov/vuln/detail/CVE-2023-6026
www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-phpmemcachedadmin

Code Behaviors & Features

Detect and mitigate CVE-2023-6026 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →