| शीर्षक | Anil-matcha Open-Generative-AI main Unrestricted Upload |
|---|
| विवरण | The Open-Generative-AI Next.js application exposes unauthenticated upload proxy routes (/api/upload-binary and /api/v1/upload-binary) that forward an attacker-controlled multipart form, including a client-supplied x-proxy-target-url S3 destination, to the backend object store via server-side fetch. Combined with the unauthenticated credential passthrough endpoints /api/v1/get_upload_url and /api/app/get_file_upload_url, which return the muapi backend's presigned S3 upload credentials (key, AWSAccessKeyId, policy, signature) to any caller, an unauthenticated remote attacker can upload arbitrary file types to the backend S3 bucket. Malicious content may then be hosted on trusted S3/CDN domains, enabling stored XSS, malware distribution, and phishing, and the proxy can be abused as an open upload outlet.
|
|---|
| स्रोत | ⚠️ https://github.com/Anil-matcha/Open-Generative-AI/issues/310 |
|---|
| उपयोगकर्ता | Practice (UID 95611) |
|---|
| सबमिशन | 03/08/2026 01:17 PM (1 महीना पहले) |
|---|
| संयम | 12/09/2026 09:22 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 403185 [Anil-matcha Open-Generative-AI तक 1.0.11/2.0.0 S3 Upload /api/upload-binary x-proxy-target-url अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|