cbcvebase.
CVE-2018-7669
published 2018-04-27

CVE-2018-7669: An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application is vulnerable to a directory traversal…

PriorityP263high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EXPLOIT
EPSS
17.48%
96.8th percentile
An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application is vulnerable to a directory traversal attack, allowing an attacker to access arbitrary files from the host Operating System using a sitecore/shell/default.aspx?xmlcontrol=LogViewerDetails&file= URI. Validation is performed to ensure that the text passed to the 'file' parameter correlates to the correct log file directory. This filter can be bypassed by including a valid log filename and then appending a traditional 'dot dot' style attack.

Affected

4 ranges
VendorProductVersion rangeFixed in
sitecoresitecore.net——
sitecoresitecore.net——
sitecoresitecore.net——
sitecoresitecore.net>= 8.2—

Detection & IOCsextracted from sources · hover to see the quote

  • →Flag HTTP requests where the 'file' parameter in the Log Viewer URL begins with a valid log path (e.g., URL-encoded path to the logs directory) but then appends backslash dot-dot traversal sequences to escape the intended directory — the bypass relies on a valid log filename prefix followed by traversal. ↗
  • →Authentication is required to exploit this vulnerability; monitor for authenticated sessions making anomalous Log Viewer requests with traversal patterns, as insider threat or post-credential-compromise scenarios are the primary attack vector. ↗
  • ·The vulnerability affects Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above; earlier versions are untested and may also be affected. ↗

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.