| शीर्षक | dbgate <= 7.2.5 Path Traversal |
|---|
| विवरण | A vulnerability was found in dbgate/dbgate up to 7.2.5 and classified as critical. The issue concerns the jsldata controller which accepts the file:// URI scheme in the jslid parameter for both read and write operations. An attacker can specify paths such as file:///etc/passwd or file:///root/.ssh/authorized_keys to read sensitive files or write arbitrary content to any location on the server filesystem. The default Docker deployment uses anonymous authentication, making this exploitable without credentials. The attack can be launched remotely over the network. The CVSS base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). |
|---|
| स्रोत | ⚠️ https://github.com/0xGenesi/CVE/blob/main/dbgate_jsldata_file_read_write.md |
|---|
| उपयोगकर्ता | chenhuanlin (UID 100424) |
|---|
| सबमिशन | 14/08/2026 08:53 AM (2 महीनों पहले) |
|---|
| संयम | 27/09/2026 07:01 PM (1 month later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 398435 [DbGate तक 7.2.6 JslData Controller getJslFileName jslid निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 0 |
|---|