HexBrain

Linux Foundation Decentralized Trust · Report #1635321

Fix : (Security) Mitigate Path Traversal Bug

Validstatus
lowseverity
$200bounty
6upvotes
5 Aug 2022disclosed

How it was found

Unsanitized input from arg[0] argument flows into java.io.FileOutputStream, where it is used as a path. This may result in a Path Traversal vulnerability and allow an attacker to write to arbitrary files.

Impact

Being able to access and manipulate an arbitrary path leads to vulnerabilities when a program is being run with privileges that the user providing the path should not have. A website with a path traversal vulnerability would allow users access to sensitive files on the server hosting it. CLI programs may also be vulnerable to path traversal if they are being ran with elevated privileges (such as with the setuid or setgid flags in Unix systems)

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original