| tiêu đề | ThingsGateway v12 Unauthorized Download Vulnerability |
|---|
| Mô tả | ThingsGateway is an open-source Industrial Internet of Things (IIoT) edge computing gateway focused on efficient data collection, edge processing, and reliable forwarding for industrial field devices. The project is designed for real-world industrial scenarios, emphasizing stability, high performance, scalability, and engineering maintainability, making it suitable for various application environments such as industrial automation, energy, power, manufacturing, and building automation.
The system's defense logic (fileName.StartsWith(@"../Logs")) && filePath.Contains("..") was intended to allow access if the path starts with the ../Logs directory (for log reading) while generally disallowing cross-directory access (Contains("..")). However, due to short-circuit evaluation characteristics, if an attacker constructs a fileName starting with ../Logs, the first part of the logical expression !(...) becomes false. This causes the entire && condition to fail, completely bypassing the filePath.Contains("..") validation. |
|---|
| Nguồn | ⚠️ https://github.com/SourByte05/SourByte-Lab/issues/11 |
|---|
| Người dùng | sourbyte (UID 94279) |
|---|
| Đệ trình | 04/03/2026 09:40 (cách đây 7 các tháng) |
|---|
| Kiểm duyệt | 15/03/2026 19:49 (11 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 351156 [ThingsGateway 12 /api/file/download fileName duyệt thư mục] |
|---|
| điểm | 20 |
|---|