CVE-2023-25168
published 2023-02-09CVE-2023-25168: Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system. This vulnerability…
PriorityP346high8.2CVSS 3.1
AVNACHPRLUINSCCNIHAH
EPSS
0.96%
56.9th percentile
Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system. This vulnerability can be combined with `GHSA-p8r3-83r8-jwj5` to overwrite files on the host system. In order to use this exploit, an attacker must have an existing "server" allocated and controlled by Wings. This vulnerability has been resolved in version `v1.11.4` of Wings, and has been back-ported to the 1.7 release series in `v1.7.4`. Anyone running `v1.11.x` should upgrade to `v1.11.4` and anyone running `v1.7.x` should upgrade to `v1.7.4`. There are no known workarounds for this issue.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | pterodactyl_wings | >= 0 < 1.7.4 | 1.7.4 |
| github.com | pterodactyl_wings | >= 1.11.0 < 1.11.4 | 1.11.4 |
| pterodactyl | wings | < 1.7.4 | 1.7.4 |
| pterodactyl | wings | — | — |
| pterodactyl | wings | — | — |
| pterodactyl | wings | — | — |
| pterodactyl | wings | — | — |
| pterodactyl | wings | — | — |
| pterodactyl | wings | >= 1.7.0 < 1.7.4 | 1.7.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system in github.com/pterodactyl/wings
osv·2024-08-20
CVE-2023-25168 Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system in github.com/pterodactyl/wings
Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system in github.com/pterodactyl/wings
Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system in github.com/pterodactyl/wings
GHSA
Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system
ghsa·2023-02-10
CVE-2023-25168 [CRITICAL] CWE-59 Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system
Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system
### Impact
This vulnerability impacts anyone running the affected versions of Wings. The vulnerability can be used to delete files and directories recursively on the host system. This vulnerability can be combined with [`GHSA-p8r3-83r8-jwj5`](https://github.com/pterodactyl/wings/security/advisories/GHSA-p8r3-83r8-jwj5) to overwrite files on the host system.
In order to use this exploit, an attacker must have an existing "server" allocated and controlled by Wings. Information on how the exploitation of this vulnerability works will be released on February 24th, 2023 in North America.
### Patches
This vulnerability has been resolved in version `v1.11.4` of
OSV
Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system
osv·2023-02-10
CVE-2023-25168 [CRITICAL] Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system
Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system
### Impact
This vulnerability impacts anyone running the affected versions of Wings. The vulnerability can be used to delete files and directories recursively on the host system. This vulnerability can be combined with [`GHSA-p8r3-83r8-jwj5`](https://github.com/pterodactyl/wings/security/advisories/GHSA-p8r3-83r8-jwj5) to overwrite files on the host system.
In order to use this exploit, an attacker must have an existing "server" allocated and controlled by Wings. Information on how the exploitation of this vulnerability works will be released on February 24th, 2023 in North America.
### Patches
This vulnerability has been resolved in version `v1.11.4` of
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/pterodactyl/wings/commit/429ac62dba22997a278bc709df5ac00a5a25d83dhttps://github.com/pterodactyl/wings/security/advisories/GHSA-66p8-j459-rq63https://github.com/pterodactyl/wings/security/advisories/GHSA-p8r3-83r8-jwj5https://github.com/pterodactyl/wings/commit/429ac62dba22997a278bc709df5ac00a5a25d83dhttps://github.com/pterodactyl/wings/security/advisories/GHSA-66p8-j459-rq63https://github.com/pterodactyl/wings/security/advisories/GHSA-p8r3-83r8-jwj5
2023-02-09
Published