Path Traversal in Nim-Lang Docutils
CVE-2022-23602
Nimforum is a lightweight alternative to Discourse written in Nim. In versions prior to 2.2.0 any forum user can create a new thread/post with an include referencing a file local to the host operating system. Nimforum will render the file if able. This can also be done silently by using NimForum's post "preview" endpoint. Even if NimForum is running as a non-critical user, the forum.json secrets can be stolen. Version 2.2.0 of NimForum includes patches for this vulnerability. Users are advised to upgrade as soon as is possible. There are no known workarounds for this issue.
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.013 (70.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 70th percentile — 70.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- github.com/nim-lang/nimforum/security/advisories/GHSA-q3vh-x957-wr75 (Exploit, Patch, Third Party Advisory)
- github.com/nim-lang/Nim/commit/cb894c7094fb49014f85815a9dafc38b5dda743e (Patch, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-23602?
- CVE-2022-23602 is a high-severity vulnerability in Nim-Lang Docutils, classified under Path Traversal. CVSS score: 7.7/10. Published 2022-02-01.
- How severe is CVE-2022-23602?
- High severity. CVSS v3 base score is 7.7 out of 10.
- Is CVE-2022-23602 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.