SB2023082509 - Path traversal in LG SuperSign Media Editor

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Path traversal (CVE-ID: CVE-2023-40517)

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences within the getObject method implemented in the ContentRestController class. A remote attacker can send a specially crafted HTTP request and read arbitrary files on the system.

2) Path traversal (CVE-ID: CVE-2023-41181)

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences within the getSubFolderList method. A remote attacker can send a specially crafted HTTP request and read arbitrary files on the system.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References

• https://www.zerodayinitiative.com/advisories/ZDI-23-1219/
• https://www.zerodayinitiative.com/advisories/ZDI-23-1220/