| शीर्षक | leomoon-studios wiki-go <= 1.9.1 Path Traversal |
|---|
| विवरण | wiki-go ≤ 1.9.1 contains a path-traversal flaw in the DeleteCommentHandler (admin-only) that allows an authenticated administrator to delete arbitrary files on the host filesystem by submitting a crafted documentPath segment in the request URL. The vulnerability is rooted in internal/comments/comments.go (DeleteComment) which concatenates the URL-derived path into os.Remove without any filepath.Clean or SanitizePath validation; DeleteCommentHandler only validates the trailing commentID against a loose regex (^\d{14}_[\w-]+\.md$), not the documentPath. The flaw affects all default deployments (admin role, default credentials admin/admin). |
|---|
| स्रोत | ⚠️ https://github.com/leomoon-studios/wiki-go/security/advisories/GHSA-g86r-58wp-4v86 |
|---|
| उपयोगकर्ता | mikannse (UID 100854) |
|---|
| सबमिशन | 08/10/2026 04:14 AM (15 दिन पहले) |
|---|
| संयम | 21/10/2026 01:12 PM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 424734 [leomoon-studios wiki-go तक 1.9.1 Comment Deletion comments.go DeleteComment documentPath निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|