| शीर्षक | OpenBoxes < v0.9.2 Unrestricted Upload |
|---|
| विवरण | The document/uploadDocument controller action used a flawed validation mechanism to prevent template document types from being uploaded to stock movements, shipments, purchase orders, and invoices. The validation relied on Hibernate DocumentType object equality and a dynamically generated allowlist, allowing authenticated users with document upload permissions to bypass the restriction and upload forbidden template document types. This could compromise document integrity and, when combined with the SSTI vulnerability fixed in PR #5943, serve as the initial step toward remote code execution.
References:
Vulnerable Release: https://github.com/openboxes/openboxes/releases/tag/v0.9.1
Fixed Release: https://github.com/openboxes/openboxes/releases/tag/v0.9.2
Patch Date: 2024-07-23
Patch PR: https://github.com/openboxes/openboxes/pull/4764
Fix Commit: https://github.com/openboxes/openboxes/commit/e945d6bfcec29642f514e7d298dfba2cc6cd7cd4 |
|---|
| स्रोत | ⚠️ https://gist.github.com/nedlir/744e55b267daab6f74b76bdc6f0d711d |
|---|
| उपयोगकर्ता | nedlir (UID 95981) |
|---|
| सबमिशन | 28/06/2026 09:41 PM (2 महीनों पहले) |
|---|
| संयम | 16/08/2026 07:48 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 391110 [OpenBoxes तक 0.9.1 Document Upload Controller DocumentController.groovy DocumentController अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|