-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability exists in the lsfusion.http.controller.file.DownloadFileRequestHandler.handleRequest method. Based on the provided vulnerability description and the analysis of the source code, the version request parameter is used to construct a file path for file download operations. The code does not properly sanitize the version parameter, allowing an attacker to use path traversal sequences (../) to navigate the file system and access arbitrary files. The issue is exacerbated when the initial fileName extracted from the URL path is empty, making the version parameter the sole component of the file path. The FileUtils.readFile call then uses this malicious path, leading to the exposure of sensitive files.
lsfusion.http.controller.file.DownloadFileRequestHandler.handleRequestweb-client/src/main/java/lsfusion/http/controller/file/DownloadFileRequestHandler.java
JavaJavaOngoing coverage of React2Shell
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| lsfusion.platform:web-client | maven | <= 6.1 |