Description
slide-maker through 5.8.0 contains a path traversal vulnerability in generate_images_openai.py that allows attackers to write image files outside the output directory via manifest-supplied filenames. Attackers can influence deck source material so the image prompt manifest contains ../ or symlinked filenames, creating directories and overwriting existing files at arbitrary paths.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
addsumtech slide-maker
Default version status: unaffected
0 to ≤ 5.8.0affected
pkg:github/addsumtech/slides_makerReferences
- https://hackmd.io/@haind/BJnX7pIifx ↗
- https://github.com/addsumtech/slides_maker/blob/3767cc346d63ef1646082c87f15fbf0be582b152/skills/slide-maker/scripts/generate_images_openai.py#L153-L156 ↗
- https://github.com/addsumtech/slides_maker/blob/3767cc346d63ef1646082c87f15fbf0be582b152/skills/slide-maker/scripts/generate_images_openai.py#L270-L285 ↗
- https://github.com/addsumtech/slides_maker ↗
- https://www.vulncheck.com/advisories/slide-maker-through-5.8.0-path-traversal-via-generate-images-openai-py ↗