CVE-2023-45880: 
NixOS vulnerability analysis and mitigation

GibbonEdu Gibbon through version 25.0.0 contains a directory traversal vulnerability in the report template builder functionality. The vulnerability allows authenticated users with high privileges to create new Asset Components where the templateFileDestination parameter can be set to an arbitrary pathname and extension, enabling the creation of PHP files outside of the uploads directory directly in the webroot (USD Advisory, NVD).

The vulnerability exists in the report template builder functionality where the templateFileDestination parameter is not properly validated. When creating a new Asset Component, an attacker can manipulate this parameter to specify arbitrary file paths and extensions. The vulnerability allows writing files directly to the webroot instead of being restricted to the uploads directory. The CVSS v3.1 base score is 7.2 (High) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (NVD).

Successful exploitation of this vulnerability allows an attacker to write arbitrary PHP files to the webroot directory, potentially leading to remote code execution on the affected system. Since the files can be created with PHP extensions, this enables execution of malicious code in the context of the web server (USD Advisory).

The vulnerability has been fixed in version 25.0.01. It is recommended to prevent passing user-supplied input to filesystem operations. If user input must be processed, it should be properly escaped and a whitelist approach should be implemented to only allow valid input (USD Advisory).