CVE-2023-25168

HIGH Year: 2023
CVSS v3 Score
8.2
High
Weakness Type
CWE-59
View all →

Vulnerability Description

Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system. This vulnerability can be combined with `GHSA-p8r3-83r8-jwj5` to overwrite files on the host system. In order to use this exploit, an attacker must have an existing "server" allocated and controlled by Wings. This vulnerability has been resolved in version `v1.11.4` of Wings, and has been back-ported to the 1.7 release series in `v1.7.4`. Anyone running `v1.11.x` should upgrade to `v1.11.4` and anyone running `v1.7.x` should upgrade to `v1.7.4`. There are no known workarounds for this issue.

Related Vulnerabilities

CVE-2011-1408

HIGH
CVSS:8.2(High)

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks.

CWE-592011

CVE-2018-1630

HIGH
CVSS:8.2(High)

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in onmode. IBM X-F...

CWE-592018

CVE-2018-1631

HIGH
CVSS:8.2(High)

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in oninit mongohas...

CWE-592018

CVE-2018-1632

HIGH
CVSS:8.2(High)

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in .infxdirs. IBM ...

CWE-592018

CVE-2018-1633

HIGH
CVSS:8.2(High)

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in onsrvapd. IBM X...

CWE-592018

CVE-2018-1634

HIGH
CVSS:8.2(High)

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in infos.DBSERVERN...

CWE-592018