# Xibo CMS path traversal flaw lets remote attackers read arbitrary files

- Date: 2013-10-02
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2013-5979
- Products: [Xibo](https://signagelist.org/products/xibo/)

NVD published a path traversal vulnerability in Xibo CMS. Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files using directory traversal sequences in a request.

## Sources

- [CVE-2013-5979](https://nvd.nist.gov/vuln/detail/CVE-2013-5979) (NIST NVD)
- [http://www.baesystemsdetica.com.au/Research/Advisories/Xibo-Directory-Traversal-Vulnerability-%28DS-2013-00](http://www.baesystemsdetica.com.au/Research/Advisories/Xibo-Directory-Traversal-Vulnerability-%28DS-2013-00)
- [https://bugs.launchpad.net/xibo/+bug/1093967](https://bugs.launchpad.net/xibo/+bug/1093967)

Page: https://signagelist.org/incidents/2013-10-xibo-cms-path-traversal-flaw-lets-remote/