Wiki.js Directory Traversal Vulnerability on Windows

A directory traversal vulnerability allowing access to files outside of the Wiki.js context has been identified in Wiki.js versions prior to 2.5.254. This issue occurs on Windows hosts when a storage module with local asset cache fetching, such as Local File System or Git, is enabled. The vulnerability can be exploited by crafting a special URL that takes advantage of directory traversal, potentially allowing a malicious user to read any file on the file system. This exploitation is possible only if no web application firewall, like Cloudflare, intercepts and strips harmful URLs.

Impact

Exploitation of this vulnerability could lead to unauthorized reading of files on the server's file system.

Remediation

Users can upgrade to Wiki.js version 2.5.254 or later, where this vulnerability has been patched. As an alternative, storage modules with local asset caching capabilities, such as Local File System or Git, can be disabled.