CVE-2012-3521
GeSHi vulnerable to Directory Traversal
Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.
Exploit likelihood
What each source reports
NVD Score used
Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.
- Record
CVE-2012-3521- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.
- Record
CVE-2012-3521- Updated
- 2026-11-02
EUVDEUVD-2012-3476 No score
Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.
- Record
EUVD-2012-3476- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fw3x-2pr2-5j64
GeSHi vulnerable to Directory Traversal
Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.
- Record
GHSA-fw3x-2pr2-5j64- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-22
- Updated
- 2026-11-02
OSVGHSA-fw3x-2pr2-5j64
GeSHi vulnerable to Directory Traversal
Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.
- Record
GHSA-fw3x-2pr2-5j64- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-22
- Updated
- 2026-11-02
OSV No score
Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.
- Record
CVE-2012-3521- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3521 No score
Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.
- Record
DEBIAN-CVE-2012-3521- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-3521 No score
Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.
- Record
UBUNTU-CVE-2012-3521- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
geshi/geshiPackagist |
before 1.0.8.11 | 1.0.8.11 |
geshiDebian:12 |
before 1.0.8.4-2 | 1.0.8.4-2 |
geshiDebian:13 |
before 1.0.8.4-2 | 1.0.8.4-2 |
geshiDebian:14 |
before 1.0.8.4-2 | 1.0.8.4-2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3521 is a medium vulnerability (CVSS 5.0) in Qbnz Geshi, published June 13, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.17%, the 88th percentile. Fixed in geshi/geshi 1.0.8.11.
References
sourceforge.net/p/geshi/code/2507
lists.fedoraproject.org/pipermail/package-announce/2013-May/105317.html
bugs.debian.org/cgi-bin/bugreport.cgi?bug=685324
openwall.com/lists/oss-security/2012/08/21/11