PT-2023-28907 · Unknown · Shokoserver

Kwstubbs

·

Published

2023-09-28

·

Updated

2023-10-06

·

CVE-2023-43662

CVSS v3.1

8.6

High

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions ShokoServer (affected versions not specified)
Description The issue affects ShokoServer, a media server for organizing anime. In affected versions, the "/api/Image/WithPath" endpoint is accessible without authentication and is supposed to return default server images. The endpoint accepts the parameter serverImagePath, which is not sanitized before being passed to System.IO.File.OpenRead, resulting in an arbitrary file read. This may lead to an unauthenticated attacker accessing sensitive information and reading files stored on the server. The issue is exacerbated in the Windows installer, which installs ShokoServer as administrator.
Recommendations As a temporary workaround, consider limiting access to the "/api/Image/WithPath" endpoint or manually patching installations until a patched release is made. Users should manually patch their installations until a patched release is made. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-43662
GHSA-MWCV-GHJQ-8F2G

Affected Products

Shokoserver