Luracast Restler directory traversal vulnerability

ALTO 7.5CVE-2017-15363 · GHSA-rvmg-xc29-rvxf · Published 15/10/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
aoe/restler Packagist	`< 1.7.1`	`1.7.1`
luracast/restler Packagist	`< 3.1.0`	`3.1.0`
restler luracast	`< 1.7.1< 3.0.0`	`1.7.13.0.0`

Description

Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2017-15363 · ADVISORY
extensions.typo3.org/extension/restler · WEB
AOEpeople/TYPO3_Restler · PACKAGE
AOEpeople/TYPO3_Restler release 1.7.1 · WEB
extensions.typo3.org/extension/download/restler/1.7.1/zip · Vendor Advisory
extensions.typo3.org/extension/restler · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free