Vulnerability in Pterodactyl Wings
CVE-2023-25168
Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system. This vulnerability can be combined with `GHSA-p8r3-83r8-jwj5` to overwrite files on the host system. In order to use this exploit, an attacker must have an existing "server" allocated and controlled by Wings. This vulnerability has been resolved in version `v1.11.4` of Wings, and has been back-ported to the 1.7 release series in `v1.7.4`. Anyone running `v1.11.x` should upgrade to `v1.11.4` and anyone running `v1.7.x` should upgrade to `v1.7.4`. There are no known workarounds for this issue.
EPSS: 0.010 (58.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.6 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H.
Affected products
- Pterodactyl Wings — versions 1.11.0, < 1.7.4, 1.11.2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
- security-advisories@github.com (x_refsource_MISC, Vendor Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-25168?
- CVE-2023-25168 is a critical-severity vulnerability in Pterodactyl Wings, classified under Improper Link Resolution Before File Access. CVSS score: 9.6/10. Published 2023-02-09.
- How severe is CVE-2023-25168?
- Critical severity. CVSS v3 base score is 9.6 out of 10.