| タイトル | huangjunsen0406 xiaozhi-mcphub 1.0.3 Path Traversal |
|---|
| 説明 | A path traversal vulnerability (CWE-22) exists in huangjunsen0406/xiaozhi-mcphub 1.0.3. The DXT upload handler in src/controllers/dxtController.ts extracts .dxt archives and uses the name field from the untrusted manifest.json file to construct the extraction path using path.join. Because this value is not sanitized, an authenticated attacker can use traversal sequences (e.g., ../../) to extract files to arbitrary locations outside the intended directory. |
|---|
| ソース | ⚠️ https://github.com/huangjunsen0406/xiaozhi-mcphub/issues/29 |
|---|
| ユーザー | ccccccctfi (UID 97498) |
|---|
| 送信 | 2026年04月20日 17:38 (2 月 ago) |
|---|
| モデレーション | 2026年05月07日 18:40 (17 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 361904 [huangjunsen0406 xiaozhi-mcphub 迄 1.0.3 dxtController.ts manifest.name ディレクトリトラバーサル] |
|---|
| ポイント | 20 |
|---|