| 제목 | dbgate <= 7.2.5 Path Traversal |
|---|
| 설명 | A vulnerability was found in dbgate/dbgate up to 7.2.5 and classified as critical. Affected by this issue is the archive link creation and file operation handling of the DbGate API service. The manipulation of the parameter linkedFolder with an input such as /etc leads to path traversal. Using the created link through files/load allows an unauthenticated attacker to read arbitrary files such as /etc/passwd, while files/save allows writing arbitrary files outside the intended archive directory. The default anonymous deployment requires no authentication. The attack can be initiated remotely. The CVSS base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). |
|---|
| 원천 | ⚠️ https://github.com/0xGenesi/CVE/blob/main/dbgate_archive_link_path_traversal.md |
|---|
| 사용자 | chenhuanlin (UID 100424) |
|---|
| 제출 | 2026. 08. 14. AM 08:51 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 27. PM 07:01 (1 month later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 410924 [dbgate 까지 7.3.1 Archive Link Creation archive.js createLink linkedFolder 디렉토리 순회] |
|---|
| 포인트들 | 20 |
|---|