PT-2022-17193 · Unknown · Drogonframework/Drogon

Kirill89 · Published 2022-02-21 · Updated 2022-02-28 · CVE-2022-25297

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions drogonframework/drogon versions prior to 1.7.5

Description The issue arises from the unsafe handling of file names during upload using the HttpFile::save() method, potentially allowing attackers to write files to arbitrary locations outside the designated target folder.

Recommendations For versions prior to 1.7.5, update to version 1.7.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the HttpFile::save() method until a patch is available.

Exploit

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2022-25297

SNYK-UNMANAGED-DROGONFRAMEWORKDROGON-2407243

Affected Products

Drogonframework/Drogon

References · 7

• 🔥 https://github.com/drogonframework/drogon/pull/1174 · Exploit
• 🔥 https://snyk.io/vuln/SNYK-UNMANAGED-DROGONFRAMEWORKDROGON-2407243 · Exploit
• https://github.com/drogonframework/drogon/commit/3c785326c63a34aa1799a639ae185bc9453cb447 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-25297 · Security Note
• https://osv.dev/vulnerability/CVE-2022-25297 · Vendor Advisory
• https://t.me/cibsecurity/37854 · Telegram Post
• https://t.me/cvenotify/27122 · Telegram Post