| शीर्षक | dbgate <= 7.2.5 Path Traversal |
|---|
| विवरण | A vulnerability was found in dbgate/dbgate up to 7.2.5 and classified as critical. The config/create-connections-and-settings-zip endpoint passes the user-controlled filePath parameter directly to a file write operation without path validation. Unlike other export endpoints that restrict output to managed directories, this endpoint accepts any absolute filesystem path. An unauthenticated attacker can overwrite existing files with ZIP-formatted content, causing denial of service or corruption of system configuration. The default Docker deployment uses anonymous authentication. The attack can be initiated remotely. The CVSS base score is 9.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H). |
|---|
| स्रोत | ⚠️ https://github.com/0xGenesi/CVE/blob/main/dbgate_config_zip_arbitrary_write.md |
|---|
| उपयोगकर्ता | chenhuanlin (UID 100424) |
|---|
| सबमिशन | 14/08/2026 08:56 AM (2 महीनों पहले) |
|---|
| संयम | 27/09/2026 07:01 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 410926 [dbgate तक 7.3.1 Create Connection Endpoint zipJsonLinesData.js zipJsonLinesData filePath निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|