| 제목 | Devika Agentic AI Software Engineer Latest Version Path Traversal |
|---|
| 설명 | When performing static code analysis, if a parameter received in the API is forwarded directly to the user without validation, a critical vulnerability arises.In the Devika.py file, the /api/get-browser-snapshot endpoint takes the query from the request and sends the specified file to the user. Since there is no filtering or additional validation, any file can be sent to the user.
The vulnerability arises as you can see from below.
Vulnerable Endpoint: localhost:1337/api/get-browser-snapshot?snapshot_path=
Payload: ../../../../../../etc/passwd
devika.py {123-127}:
@app.route("/api/get-browser-snapshot", methods=["GET"])
@route_logger(logger)
def browser_snapshot():
snapshot_path = request.args.get("snapshot_path")
return send_file(snapshot_path, as_attachment=True)
|
|---|
| 원천 | ⚠️ https://github.com/stitionai/devika/pull/682 |
|---|
| 사용자 | slash0x99 (UID 77812) |
|---|
| 제출 | 2025. 01. 30. PM 12:58 (2 연령 ago) |
|---|
| 모더레이션 | 2025. 02. 07. PM 05:32 (8 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 272383 [stitionai devika get-browser-snapshot snapshot_path 디렉토리 순회] |
|---|
| 포인트들 | 0 |
|---|