Test ID:	1.3.6.1.4.1.25623.1.0.106586
Category:	Web application abuses
Title:	Kodi Local File Inclusion Vulnerability
Summary:	Kodi is prone to an arbitrary file disclosure vulnerability.
Description:	Summary: Kodi is prone to an arbitrary file disclosure vulnerability. Vulnerability Insight: The web interface loads a thumbnail of an image, video or add-on when selecting a category in the left menu. Insufficient validation of user input is performed on this URL resulting in a local file inclusion vulnerability. Vulnerability Impact: A unauthenticated attacker may read arbitrary files from the file system. Solution: Update to Kodi version 17.2 or later. For details please see the references. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-5982 BugTraq ID: 96481 http://www.securityfocus.com/bid/96481 https://www.exploit-db.com/exploits/41312/ http://seclists.org/fulldisclosure/2017/Feb/27 http://packetstormsecurity.com/files/141043/Kodi-17.1-Arbitrary-File-Disclosure.html https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.