{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ai-doiti-doit_pro/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:i-doit:i-doit_pro:*:*:*:*:*:*:*:*","cpe:2.3:a:i-doit:i-doit:*:*:*:*:pro:*:*:*"],"_cs_cves":[{"cvss":6.5,"id":"CVE-2023-37739"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["i-doit Pro (\u003c= 25)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["synetics GmbH"],"content_html":"\u003cp\u003ei-doit Pro versions 25 and below contain a path traversal vulnerability. An authenticated attacker, regardless of privilege level, can exploit this flaw by manipulating the 'file' parameter within the 'file_manager' component to access unauthorized files on the underlying filesystem.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker authenticates to the i-doit Pro application with valid, potentially low-privileged, credentials.\u003c/li\u003e\n\u003cli\u003eAttacker identifies a target file on the host system to retrieve.\u003c/li\u003e\n\u003cli\u003eAttacker crafts an HTTP GET request to the application, specifically targeting the /index.php or /?moduleID endpoints.\u003c/li\u003e\n\u003cli\u003eAttacker injects path traversal sequences (e.g., ../../../) into the 'file' parameter of the 'file_manager' component.\u003c/li\u003e\n\u003cli\u003eThe application fails to sanitize the input, allowing the traversal to escape the intended directory.\u003c/li\u003e\n\u003cli\u003eThe application returns the contents of the requested file in the HTTP response.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows authenticated attackers to read sensitive system files, potentially leading to information disclosure of configuration files, credentials, or internal application logic.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eInventory all instances of i-doit Pro to identify versions 25 or below.\u003c/li\u003e\n\u003cli\u003eApply security updates provided by synetics GmbH to remediate CVE-2023-37739.\u003c/li\u003e\n\u003cli\u003eUntil patched, restrict access to the i-doit Pro administrative interface to trusted networks only.\u003c/li\u003e\n\u003cli\u003eMonitor web access logs for requests containing suspicious path traversal sequences (e.g., '../') directed at the 'file_manager' parameter.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-10-23T15:37:55Z","date_published":"2026-10-23T15:37:55Z","id":"https://feed.craftedsignal.io/briefs/2026-10-idoit-pro-path-traversal/","summary":"i-doit Pro version 25 and below is susceptible to a path traversal vulnerability in the file_manager parameter, allowing authenticated attackers to read sensitive files via manipulated HTTP requests.","title":"i-doit Pro: Path traversal vulnerability (CVE-2023-37739)","url":"https://feed.craftedsignal.io/briefs/2026-10-idoit-pro-path-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:i-Doit:i-Doit_pro:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}