decap-server Path Traversal via Sibling Directory Prefix Matching
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 7.6epss 0.4%
exploitation probability
0.4%top 66% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
decap-server contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Attackers can access sibling directories whose names begin with the repository directory name to read, write, or delete files outside the intended repository root.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
decaporg · decap-serverpublic PoCs found — 1
cve_referencegithub.com/geo-chen/oss/blob/main/decap-cms.mdunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://github.com/decaporg/decap-cmshttps://github.com/decaporg/decap-cms/blob/11f35405cd1a1d1216e97b890173f46436752019/packages/decap-server/src/middlewares/joi/customValidators.ts#L11-L16https://github.com/geo-chen/oss/blob/main/decap-cms.mdhttps://www.vulncheck.com/advisories/decap-server-path-traversal-via-sibling-directory-prefix-matching