| tiêu đề | https://github.com/ai-genius-automations octoally v1.0.87 Local Sensitive Logic Exposure to path traversal |
|---|
| Mô tả | OctoAlly’s backend server is reachable from the local network by default. An attacker can first use the unauthenticated /api/health endpoint to identify whether a target is running OctoAlly. Once the service is discovered, the attacker can call the unauthenticated /api/files endpoint with an arbitrary directory path and obtain a listing of that directory, including file names, types, sizes, and extensions.
This allows an attacker, in the same network as victim, to enumerate directories on the target machine without authentication.
The demonstration vedio is here : https://drive.google.com/drive/folders/1foaD06TGZMAfXbTuLyU5VS2vcpIFXfLu?usp=sharing |
|---|
| Nguồn | ⚠️ https://github.com/ai-genius-automations/octoally/issues/23 |
|---|
| Người dùng | Anonymous User |
|---|
| Đệ trình | 05/10/2026 05:04 (cách đây 15 ngày) |
|---|
| Kiểm duyệt | 19/10/2026 07:46 (14 days later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 422254 [ai-genius-automations octoally đến 1.0.87 server/src/index.ts path tiết lộ thông tin] |
|---|
| điểm | 0 |
|---|