DataTables Path Traversal Vulnerability in examples.php

A path traversal vulnerability has been identified in DataTables versions through 1.10.13. The issue arises in the examples.php file, where the 'src' parameter is manipulated to traverse directories, potentially leading to unauthorized access to sensitive files on the server. This vulnerability can be exploited remotely without any authentication.

Impact

Exploitation of this vulnerability allows for unauthorized file access on the server, which could lead to the disclosure of sensitive information.

Reproduction

To reproduce this vulnerability, send a POST request to '/gan/bootstrap/plugins/DataTables-1.10.5/examples/resources/examples.php' with a 'src' parameter that includes a crafted file path. The payload should traverse directories to access sensitive files, such as 'WindowsUpdate.log' or 'win.ini'.

Remediation

Upgrading to DataTables version 1.10.15 or later addresses this vulnerability. The latest version can be downloaded from the DataTables GitHub repository.