Description (CNA)
Fonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint. This occurs in serveFiles in mods/voice/src/utils.ts. NOTE: serveFiles exists in 0.5.5 but not in the next release, 0.6.1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fonoster / Fonoster | affected 0.5.5 before 0.6.1 |
CWE
CWE-24
References
- https://github.com/fonoster/fonoster/blob/4a1438d9dedeaf7b2a5b6a50d5e233f994e2b2cf/mods/voice/src/utils.ts#L66-L70
- https://zeropath.com/blog/fonoster-voiceserver-lfi-vulnerability
ADP enrichment
No English description supplied.
No references supplied.