| शीर्षक | Mirofish <= 60757b3 Path Traversal |
|---|
| विवरण | MiroFish backend API accepts a user-controlled platform parameter in six simulation endpoints and uses it unsanitized in os.path.join() to construct database file paths. An unauthenticated remote attacker can supply directory traversal sequences (e.g. ../../../etc/passwd) to read arbitrary files from the server. The vulnerable code is in backend/app/api/simulation.py at lines 1034, 1096, 1962, 2048, 2160 and 2237. No authentication is required because the entire API has no access control layer. The server binds to x.x.x.x:5001 by default exposing the issue remotely. |
|---|
| स्रोत | ⚠️ https://github.com/666ghj/MiroFish |
|---|
| उपयोगकर्ता | Fergod (UID 55882) |
|---|
| सबमिशन | 02/08/2026 03:08 AM (2 महीनों पहले) |
|---|
| संयम | 25/09/2026 10:41 AM (2 months later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 359632 [666ghj MiroFish तक 0.1.2 Query Parameter simulation.py get_simulation_posts platform निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 0 |
|---|