| शीर्षक | GL.iNet Router 4.8.x Authorization Bypass |
|---|
| विवरण | The WebDAV service authorizes the source path for COPY and MOVE requests but then applies the attacker-controlled Destination path without performing the same authorization check on that destination. A public writable share can therefore be used as a confused deputy to write outside the configured public share.
The confirmed result is unauthenticated creation, movement, and overwrite of private sibling files inside the WebDAV storage namespace. Direct unauthenticated requests to those same private paths returned 401 Unauthorized in the control checks. |
|---|
| स्रोत | ⚠️ https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/WebDAV%20Public-Share%20Destination%20Authorization%20Bypass.md |
|---|
| उपयोगकर्ता | GLiNet (UID 96704) |
|---|
| सबमिशन | 30/06/2026 10:44 AM (2 महीनों पहले) |
|---|
| संयम | 16/08/2026 03:38 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 391161 [GL.iNet XE3000 तक 4.8.x WebDAV Service COPY/MOVE अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|