Vulnerability · Published Dec 2, 2021 · Assigned by GitHub_M

CVE-2021-43795Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeria

High 7.5

In plain English

A high-severity path traversal in armeria from line. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)1.7%top 22.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Armeria is an open source microservice framework. In affected versions an attacker can access an Armeria server's local file system beyond its restricted directory by sending an HTTP request whose path contains `%2F` (encoded `/`), such as `/files/..%2Fsecrets.txt`, bypassing Armeria's path validation logic. Armeria 1.13.4 or above contains the hardened path validation logic that handles `%2F` properly. This vulnerability can be worked around by inserting a decorator that performs an additional validation on the request path.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Maven	com.linecorp.armeria:armeria	1.13.4	GHSA-8fp4-rp6c-5gcv

Affected products (as reported)

Vendor	Product	Versions
line	armeria	< 1.13.4

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/line/armeria/security/advisories/GHSA-8fp4-rp6c-5gcv x_refsource_CONFIRM
https://github.com/line/armeria/pull/3855 x_refsource_MISC
https://github.com/line/armeria/commit/e2697a575e9df6692b423e02d731f293c1313284 x_refsource_MISC