| शीर्षक | GitHub warehouse V1.0 Absolute Path Traversal |
|---|
| विवरण | A path traversal vulnerability exists in the warehouse application. The /file/showImageByPath endpoint accepts a user-supplied path parameter. This parameter is passed directly to AppFileUtils.createResponseEntity(path). Inside this method, the application concatenates the base directory path with the user input using getChars without proper validation or sanitization.
Due to the lack of boundary checks, an attacker can inject directory traversal sequences (e.g., ../) into the path parameter to traverse outside the restricted directory. This allows an authenticated attacker to read or download arbitrary files from the server’s filesystem. |
|---|
| स्रोत | ⚠️ https://fanatical-brain-9ba.notion.site/warehouse-381f1a573df48073ae69fd68e2c27b69 |
|---|
| उपयोगकर्ता | paramecium (UID 99013) |
|---|
| सबमिशन | 16/06/2026 05:33 AM (2 महीनों पहले) |
|---|
| संयम | 04/08/2026 10:11 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 385940 [yeqifu warehouse तक aaf29962ba407d22d991781de28796ee7b4670e4 FileController.java path निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 17 |
|---|