GHSA-fw3x-2pr2-5j64High

GeSHi vulnerable to Directory Traversal

Published
May 17, 2022
Last Modified
April 14, 2025

🔗 CVE IDs covered (1)

CVE-2012-3521 →

📋 Description

Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.

🎯 Affected products1

  • composer/geshi/geshi:< 1.0.8.11

🔗 References (8)