Kodi CVE-2017-8314 Directory Traversal Vulnerability
BID:98668
Info
Kodi CVE-2017-8314 Directory Traversal Vulnerability
| Bugtraq ID: | 98668 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-8314 |
| Remote: | Yes |
| Local: | No |
| Published: | May 25 2017 12:00AM |
| Updated: | May 25 2017 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Kodi Kodi 17.1 |
| Not Vulnerable: | |
Discussion
Kodi CVE-2017-8314 Directory Traversal Vulnerability
Kodi is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input.
Remote attackers may use a specially crafted request with directory-traversal sequences ('../') to retrieve sensitive information and modify arbitrary files. This may aid in further attacks.
Kodi 17.1 and prior versions are vulnerable.
Kodi is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input.
Remote attackers may use a specially crafted request with directory-traversal sequences ('../') to retrieve sensitive information and modify arbitrary files. This may aid in further attacks.
Kodi 17.1 and prior versions are vulnerable.
Exploit / POC
Kodi CVE-2017-8314 Directory Traversal Vulnerability
Attackers can exploit this issue using browser or readily available tools.
Attackers can exploit this issue using browser or readily available tools.
Solution / Fix
Kodi CVE-2017-8314 Directory Traversal Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Kodi CVE-2017-8314 Directory Traversal Vulnerability
References:
References: