Description (CNA)
Heym before 0.0.21 contains a path traversal vulnerability in the file upload endpoint that allows authenticated users to write attacker-controlled files to arbitrary locations by supplying a crafted filename with traversal sequences. Attackers can exploit the unvalidated filename parameter in the upload_file() handler to bypass path restrictions and write, read, or delete files outside the intended storage directory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| heymrun / heym | affected 0 before 0.0.21; unaffected 835843e6d2bf7d018cbb8e50f28f0426eaa20c84 |
CWE
CWE-22
References
- https://github.com/heymrun/heym/releases/tag/v0.0.21
- https://github.com/heymrun/heym/pull/92
- https://github.com/heymrun/heym/commit/835843e6d2bf7d018cbb8e50f28f0426eaa20c84
- https://www.vulncheck.com/advisories/heym-path-traversal-file-upload-via-upload-file
ADP enrichment
No English description supplied.