title: Arbitrary File Read in Fusion File Manager
description:
Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process. Additionally, they may write files to arbitrary locations, provided the files pass the application’s mime-type and file extension validation.
problem types: CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory
affected:
{
defaultStatus: affected
product: PHPFusion
repo: https://github.com/PHPFusion/PHPFusion
vendor: PHPFusion
versions:
lessThanOrEqual: 9.10.30, status: affected, version: 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
workarounds:
Technologies such as a web application firewall may help to mitigate exploitation attempts.