PT-2024-24087 · Unknown · Psitransfer
Onelovegg1
·
Published
2024-04-05
·
Updated
2025-11-25
·
CVE-2024-31453
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
PsiTransfer versions prior to 2.2.0
Description
The issue arises from the absence of restrictions on the "POST /files" endpoint, which allows users to create a path for uploading a file in a file distribution. This enables an attacker to add arbitrary files to the distribution, potentially influencing users who access the distribution afterwards and exposing them to malicious or phishing files. The exploitation involves creating a file distribution, obtaining the distribution's id, and then sending a POST request to the vulnerable endpoint with the id specified in the
Upload-Metadata header. The attacker can then send a PATCH request to upload arbitrary content.Recommendations
For PsiTransfer versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the "POST /files" endpoint to minimize the risk of exploitation. Avoid using the
sid parameter in the Upload-Metadata header until the issue is resolved.Exploit
Fix
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Psitransfer