Description
Trudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete arbitrary files by supplying encoded traversal sequences to DELETE /api/v1/backup/:backup. Attackers can also pass unvalidated file values to POST /api/v1/backup/restore to restore archives from, or extract to, paths outside the intended directories.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
polonel trudesk
Default version status: unaffected
0 to ≤ 1.2.11affected
pkg:github/polonel/trudeskReferences
- https://hackmd.io/@leediay/multiple-vuln-trudesk-1211 ↗
- https://github.com/polonel/trudesk/blob/v1.2.11/src/controllers/backuprestore.js#L108-L118 ↗
- https://github.com/polonel/trudesk/blob/v1.2.11/src/backup/restore.js#L69-L71 ↗
- https://github.com/polonel/trudesk ↗
- https://www.vulncheck.com/advisories/trudesk-through-1.2.11-path-traversal-via-backup-delete-and-restore-api ↗