PT-2025-45469 · Unknown · Astrbot Project
Published
2025-11-07
·
Updated
2025-12-05
·
CVE-2025-57698
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
AstrBot Project version 3.5.22
Description
The software contains a directory traversal issue. The
install plugin upload function within the '/plugin/install-upload' interface directly uses a filename from the request body, assigning it to the file path variable without validation. This file path variable is then used as a parameter in the file.save function, potentially allowing files to be saved to arbitrary locations within the file system through directory traversal.Recommendations
Versions prior to 3.5.22 are affected.
Apply a fix to validate the filename received in the request body before assigning it to the
file path variable.
Implement proper sanitization of the file path variable to prevent directory traversal attempts.
Restrict the file.save function to a designated directory to limit the scope of potential file uploads.Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astrbot Project