Path Traversal in Amazon Aws Software Development Kit
CVE-2023-51651
AWS SDK for PHP is the Amazon Web Services software development kit for PHP. Within the scope of requests to S3 object keys and/or prefixes containing a Unix double-dot, a URI path traversal is possible. The issue exists in the `buildEndpoint` method in the RestSerializer component of the AWS SDK for PHP v3 prior to 3.288.1. The `buildEndpoint` method relies on the Guzzle Psr7 UriResolver utility, which strips dot segments from the request path in accordance with RFC 3986. Under certain conditions, this could lead to an arbitrary object being accessed. This issue has been patched in version 3.288.1.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.004 (30.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Amazon Aws_software_development_kit
- Aws Aws-sdk-php — versions >= 3.0.0, < 3.288.1
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-advisories@github.com (x_refsource_CONFIRM, Third Party Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC, Release Notes)
Frequently asked questions
- What is CVE-2023-51651?
- CVE-2023-51651 is a medium-severity vulnerability in Amazon Aws Software Development Kit, classified under Path Traversal. CVSS score: 6.0/10. Published 2023-12-22.
- How severe is CVE-2023-51651?
- Medium severity. CVSS v3 base score is 6.0 out of 10.
- Is CVE-2023-51651 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.