Description
SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read server files by supplying file:// URLs in redirects or autodiscovery links. Attackers can return a Location header or feed link pointing to a file:// path, causing file_get_contents() to read files accessible to the web server process.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SimplePie simplepie
Default version status: unaffected
0 to ≤ 1.9.0affected
pkg:composer/simplepie/simplepieReferences
- https://github.com/simplepie/simplepie/issues/968 ↗
- https://github.com/simplepie/simplepie/pull/991 ↗
- https://github.com/abraxas/pfsense-rss-file-redirect ↗
- https://github.com/simplepie/simplepie/blob/76cccb1b2c5dcaf44f304c925ab30c0f48643992/src/File.php#L160-L176 ↗
- https://github.com/simplepie/simplepie/blob/76cccb1b2c5dcaf44f304c925ab30c0f48643992/src/File.php#L289-L293 ↗
- https://github.com/simplepie/simplepie/blob/76cccb1b2c5dcaf44f304c925ab30c0f48643992/src/HTTP/Psr18Client.php#L75-L157 ↗
- https://github.com/simplepie/simplepie ↗
- https://www.vulncheck.com/advisories/simplepie-through-1.9.0-local-file-read-via-file-redirect ↗