CVE-2024-25975 Arbitrary File Overwrite

2024-05-2913:13:14

CWE-73

SEC-VLab

github.com

arbitrary file overwrite

json alteration

authenticated attacker

path traversal

webserver access

AI Score

6.8

Confidence

High

EPSS

Percentile

15.5%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

The application implements an up- and downvote function which alters a value within a JSON file. The POST parameters are not filtered properly and therefore an arbitrary file can be overwritten. The file can be controlled by an authenticated attacker, the content cannot be controlled. It is possible to overwrite all files for which the webserver has write access. It is required to supply a relative path (path traversal).

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:hawki:hawki:*:*:*:*:*:*:*:*"
    ],
    "vendor": "hawki",
    "product": "hawki",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "commit_146967f",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]