Directory Traversal in Feehi CMS Allows File Deletion

Executive Summary

Feehi CMS 2.1.1 has a directory traversal vulnerability where an authenticated backend user with article edit permission can delete arbitrary files writable by the PHP process. The issue occurs because article image metadata is used to construct a filesystem path, which is passed to the unlink() function without proper validation or path traversal checks.

Useful 0 Not Useful 0

Detection Guidance

Check Feehi CMS logs for suspicious article update actions or file deletion attempts. Look for paths containing '..' or unusual file access patterns in common/models/Article.php and common/models/meta/ArticleMetaImages.php.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an attacker to delete critical files on the server, potentially causing denial of service or data loss. Files like configuration files or application data could be removed, disrupting service or exposing sensitive information.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA by enabling unauthorized file deletion or access, potentially violating data integrity and confidentiality requirements. Organizations may face penalties if such breaches occur due to inadequate security measures.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Feehi CMS to a patched version if available. Restrict article-edit permissions to trusted users only. Validate and sanitize all file paths in article image metadata before processing.

Useful 0 Not Useful 0