CVE-2020-16136

EUVD-2020-8102
In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory traversal ../ sequences in /Administration/Logs/ requests. The attacker is unable to enumerate files, however.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.7 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
Affected Products (NVD)
VendorProductVersion
tgstation13tgstation-server
4.4.0
tgstation13tgstation-server
4.4.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/tgstation/tgstation-server
https://github.com/tgstation/tgstation-server/security/advisories/GHSA-r8pp-42wr-2gc4
https://github.com/tgstation/tgstation-server
https://github.com/tgstation/tgstation-server/security/advisories/GHSA-r8pp-42wr-2gc4