| 제목 | https://github.com/webtorrent webtorrent 2.8.5 Absolute Path Traversal |
|---|
| 설명 | There is a path traversal vulnerability in webtorrent library 2.8.5 .The library component treats file.path as a normal file name/path component without validating whether it contains malicious path traversal sequences.. And the import information about this vulnerability is as follows:
Core location: torrent.js
Key code: In getFileModtimes(), the following line is used:
Relevant context: file.path originates from the file list in the .torrent metadata and is therefore attacker-controlled input.
Underlying issue:
Dangerous input: If an attacker sets file.path to a value such as ../../../etc/hosts, the value contains ../ segments that can escape the intended download directory.
Result: path.join(this.path, file.path) may resolve to a path outside the configured download root, allowing access to files outside the expected directory boundary. |
|---|
| 원천 | ⚠️ https://github.com/webtorrent/webtorrent/issues/3012 |
|---|
| 사용자 | akamoli (UID 101918) |
|---|
| 제출 | 2026. 10. 16. PM 03:30 (23 날 ago) |
|---|
| 모더레이션 | 2026. 11. 08. PM 06:20 (23 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 432939 [WebTorrent 까지 2.8.5/3.0.21 File Path torrent.js getFileModtimes file.path 디렉토리 순회] |
|---|
| 포인트들 | 20 |
|---|