| Название | huangjunsen0406 xiaozhi-mcphub 1.0.3 Path Traversal |
|---|
| Описание | A path traversal vulnerability (CWE-22) exists in huangjunsen0406/xiaozhi-mcphub 1.0.3. The DXT upload handler in src/controllers/dxtController.ts extracts .dxt archives and uses the name field from the untrusted manifest.json file to construct the extraction path using path.join. Because this value is not sanitized, an authenticated attacker can use traversal sequences (e.g., ../../) to extract files to arbitrary locations outside the intended directory. |
|---|
| Источник | ⚠️ https://github.com/ccccccctiiiiiiii-lab/public_exp/issues/10 |
|---|
| Пользователь | cccccccti (UID 96695) |
|---|
| Представление | 20.04.2026 09:46 (6 месяцы назад) |
|---|
| Модерация | 16.05.2026 11:57 (26 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 361904 [huangjunsen0406 xiaozhi-mcphub до 1.0.3 dxtController.ts manifest.name обход каталога] |
|---|
| Баллы | 0 |
|---|