| शीर्षक | dbgate <= 7.2.5 Path Traversal |
|---|
| विवरण | A vulnerability was found in dbgate/dbgate up to 7.2.5 and classified as critical. The files/save-uploaded-file endpoint accepts user-controlled filePath and fileName parameters without validation. The filePath parameter can reference any file on the server such as /etc/shadow, allowing it to be copied into an application-readable directory and subsequently retrieved through files/load. Additionally the fileName parameter permits path traversal to write to arbitrary target directories outside the managed files directory. The default anonymous deployment requires no authentication. The attack can be performed remotely. The CVSS base score is 9.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). |
|---|
| स्रोत | ⚠️ https://github.com/0xGenesi/CVE/blob/main/dbgate_save_uploaded_file_path_traversal.md |
|---|
| उपयोगकर्ता | chenhuanlin (UID 100424) |
|---|
| सबमिशन | 14/08/2026 08:54 AM (2 महीनों पहले) |
|---|
| संयम | 27/09/2026 07:01 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 410925 [dbgate तक 7.3.1 save-uploaded-file Endpoint files.js saveUploadedFile filePath/fileName निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|