{"schemaVersion":3,"id":"CVE-2013-0136","aliases":["CGA-45m8-p93q-mghc","CGA-h34v-78vc-g9p8"],"status":"published","duplicateOf":null,"title":null,"description":"Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service (file deletion or renaming) via (1) the uploadPath parameter in an UPLOAD operation; the paths[] parameter in a (2) DELETE, (3) CUT, or (4) COPY operation; or the newPath parameter in a (5) CUT or (6) COPY operation.","dates":{"published":"2013-06-01T10:00:00.000Z","modified":"2024-09-17T02:48:04.090Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.5,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":8.5,"severity":"high","vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.40338,"percentile":0.98632,"severity":"high","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.40338},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.40338,"percentile":0.98632}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.40338,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.40338,"percentile":0.98632}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_2C5D2D0864DEB9DF","name":"Exploit Reference (community.rapid7.com)","source":"reference","url":"https://community.rapid7.com/community/metasploit/blog/2013/05/15/new-1day-exploits-mutiny-vulnerabilities","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"25517","name":"Mutiny 5 - Arbitrary File Upload (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/25517","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["linux"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"linux","file":"exploits/linux/remote/25517.rb","codes":["CVE-2013-0136","OSVDB-93444"]},"metasploit":null},{"id":"MSF_AUXILIARY_ADMIN_HTTP_MUTINY_FRONTEND_READ_DELETE","name":"Mutiny 5 Arbitrary File Read and Delete","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/mutiny_frontend_read_delete.rb","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":[],"requiresAuth":true,"exploitdb":null,"metasploit":{"fullname":"auxiliary/admin/http/mutiny_frontend_read_delete","rank":"300","rankName":"normal","postAuth":true,"check":false,"stability":["os-resource-loss"],"sideEffects":["ioc-in-logs"],"reliability":[]}},{"id":"MSF_EXPLOIT_LINUX_HTTP_MUTINY_FRONTEND_UPLOAD","name":"Mutiny 5 Arbitrary File Upload","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/linux/http/mutiny_frontend_upload.rb","maturity":"weaponized","reliabilityScore":1,"verified":true,"type":"remote","platforms":[],"requiresAuth":true,"exploitdb":null,"metasploit":{"fullname":"exploit/linux/http/mutiny_frontend_upload","rank":"600","rankName":"excellent","postAuth":true,"check":true,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":4,"weaknesses":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/22.html"}],"affected":[{"vendor":"chainguard","product":"keycloak","name":"keycloak","label":"keycloak","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak","name":"keycloak","label":"keycloak","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"mutiny","product":"mutiny","name":"mutiny","label":"mutiny","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 5.0-1.10","noFixRecorded":false,"fixedIn":null},{"text":"5.0-1.00","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 5.0-1.10 | 5.0-1.00","eol":null,"hubHref":"/vendor/mutiny/mutiny"},{"vendor":"mutiny","product":"mutiny_appliance","name":"mutiny appliance","label":"mutiny_appliance","ecosystem":null,"cpePart":"h","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/mutiny/mutiny_appliance"},{"vendor":"mutiny","product":"mutiny_virtual_appliance","name":"mutiny virtual appliance","label":"mutiny_virtual_appliance","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/mutiny/mutiny_virtual_appliance"}],"affectedCount":5,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://community.rapid7.com/community/metasploit/blog/2013/05/15/new-1day-exploits-mutiny-vulnerabilities","label":"community.rapid7.com/community/metasploit/blog/2013/05/15/new-1day-exploits-mutiny-vulnerabilities","hostname":"community.rapid7.com","tags":["X Refsource MISC","Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/701572","label":"www.kb.cert.org/vuls/id/701572","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-59J9-3XWC-22FQ","CGA-HVFP-H9X5-4CR8"]},"timeline":[{"kind":"published","date":"2013-06-01T10:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-17T02:48:04.090Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":52,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:00:30.002Z","stale":false,"partial":false}}