Skip to main content

Path Traversal: '\..\filename'

CVE-2024-6396

High
9.8/10

Summary

A vulnerability in the `backup_run` function in aimhubio/aim in versions 3.11.0.dev1 and later allow remote attackers to overwrite any file on the host server and exfiltrate arbitrary data. The vulnerability arises due to improper handling of the `run_hash` and `repo.path` parameters, which can be manipulated to create and write to arbitrary file paths. This can lead to Denial of Service by overwriting critical system files, loss of private data, and potential Remote Code Execution.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-29 - Path Traversal: '\..\filename'

The software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\..\filename' (leading backslash dot dot) sequences that can resolve to a location that is outside of that directory.

References

Advisory Timeline

  • Published